CVE-2018-1366: IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection.

Security readout for executives and security teams

IBM Content Navigator versions 2.0 and 3.0 can generate CSV content that may be unsafe when opened in spreadsheet software. The business risk is indirect: a user opening exported data could trigger behavior in the spreadsheet application. The supplied sources do not provide a CVSS score or confirm active exploitation. Exposure is most likely where affected IBM Content Navigator versions export or present CSV data that staff open in spreadsheet software. Environments with frequent reporting, document metadata exports, or administrator-generated CSV files should prioritize checking version and vendor guidance. Treat this as a targeted hygiene issue rather than an emergency based on available evidence. Prioritize environments where affected IBM Content Navigator systems produce CSV files for business users, especially if those files are opened in spreadsheet tools. Mitigation focus: Inventory IBM Content Navigator versions in production and test environments.; Review IBM support advisory swg22012674 for vendor-approved fixes or workarounds.; Apply IBM-supported updates or configuration guidance when confirmed by the advisory..

Prepared

Jun 7, 2026, 20:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.