What is CVE-2025-27906?

CVE-2025-27906 is a medium-severity vulnerability in Ibm Content Navigator, classified under CWE-548. CVSS score: 5.3/10. Published 2025-10-14.

How severe is CVE-2025-27906?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Is CVE-2025-27906 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Ibm Content Navigator

CVE-2025-27906

IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon using an application URL. Application files and folders are visible in the browser to a user; however, the contents of the fi…

EPSS: 0.000 (9.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Ibm Content Navigator — versions 3.0.11, 3.0.15, 3.1.0

Weakness classification (CWE)

CWE-548

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

www.ibm.com/support/pages/node/7247854 (vendor-advisory, patch)

Frequently asked questions

What is CVE-2025-27906?: CVE-2025-27906 is a medium-severity vulnerability in Ibm Content Navigator, classified under CWE-548. CVSS score: 5.3/10. Published 2025-10-14.
How severe is CVE-2025-27906?: Medium severity. CVSS v3 base score is 5.3 out of 10.
Is CVE-2025-27906 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.