Security Bulletin: Security vulnerability in Cross-Site Scripting within IBM Cúram Social Program Management (CVE-2016-9732)

Summary Cross-Site Scripting security vulnerability within the IBM Cúram Social Program Management product. Vulnerability Details CVEID: CVE-2016-9732 DESCRIPTION: IBM Cúram Social Program Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...

CVE-2016-9732

IBM Curam Social Program Management 6.0, 6.1, 6.2 and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2016-9732

IBM Cúram SPM (CVE-2016-9732) is vulnerable to Cross-Site Scripting in the Web UI. Affected versions include 6.0.0.4–6.0.5.x, 6.1.x (up to 6.1.1.x), 6.2.x (up to 6.2.0.4), and 7.0.0.0. The root cause is a reflected/stored XSS vulnerability allowing arbitrary JavaScript in the UI, potentially lead...