CVE-2018-1366

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection. An attacker could exploit this vulnerability to exploit other vulnerabilities in spreadsheet software. IBM X-Force ID: 137452.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
IBMContent Navigator3.0.0; 3.0.1; 2.0.2.8; 3.0.2; 3.0.3; 2.0.2.7

References

Timeline

Published
Feb 7, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-136607.5The mint function of a smart contract implementation for BillionRewardsToken, an Ethereum token, has an integer overflow that allows the ownCVE-2018-136617.5The mintToken function of a smart contract implementation for APP, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-136627.5The mintToken function of a smart contract implementation for WorldOpctionChain, an Ethereum token, has an integer overflow that allows the CVE-2018-136637.5The mintToken function of a smart contract implementation for BSCToken, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-136647.5The mintToken function of a smart contract implementation for CWS, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-136657.5The mintToken function of a smart contract implementation for BCaaS, an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-136667.5The mintToken function of a smart contract implementation for EristicaICO, an Ethereum token, has an integer overflow that allows the owner CVE-2018-136677.5The mintToken function of a smart contract implementation for UTBTokenTest, an Ethereum token, has an integer overflow that allows the ownerCVE-2018-136687.5The mintToken function of a smart contract implementation for BTPCoin, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-136697.5The mintToken function of a smart contract implementation for NCU, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-136707.5The mintToken function of a smart contract implementation for GFCB, an Ethereum token, has an integer overflow that allows the owner of the CVE-2018-136717.5The mintToken function of a smart contract implementation for DinsteinCoin, an Ethereum token, has an integer overflow that allows the owner
CVE-2018-1366: High severity, CVSS 7.8 | Vulnix