CVE-2017-1195

IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to...

CVE-2017-1110

IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to view the incidents of a higher privileged user. IBM X-Force ID: 120915...

IBM Curam Social Program Management Elevation of Privilege Vulnerability

IBM Curam Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. An elevation of privilege vulnerability exists in IBM Curam SPM. A remote attacker could exploit this vulnerability to...

CVE-2017-1110: Exposure of Sensitive Information to an Unauthorized Actor

IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to view the incidents of a higher privileged user. IBM X-Force ID: 120915...

PT-2017-12320

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 6.0 through 7.0 Description The issue allows a remote attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, the attacker...

CVE-2016-9732: Improper Neutralization of Input During Web Page Generation

IBM Curam Social Program Management 6.0, 6.1, 6.2 and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2017-1195: URL Redirection to Untrusted Site

IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to...

CVE-2017-1110

IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to view the incidents of a higher privileged user. IBM X-Force ID: 120915...

PT-2017-11740

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 6.0 through 7.0 Description The issue allows an authenticated user to view the incidents of a higher privileged user. Recommendations For versions 6.0 through 7.0, update to a version that fixes thi...

PT-2017-10298

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 6.0 through 7.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

Code injection

IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5iFix10 and 6.0.5 before 6.0.5.6 allows remote authenticated users to load arbitrary Java classes via unspecified vectors...

CVE-2014-8903: Improper Neutralization of Special Elements used in a Command

IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5iFix10 and 6.0.5 before 6.0.5.6 allows remote authenticated users to load arbitrary Java classes via unspecified vectors...

PT-2017-6299

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 6.0 SP2 before EP26 IBM Curam Social Program Management versions 6.0.4 before 6.0.4.5iFix10 IBM Curam Social Program Management versions 6.0.5 before 6.0.5.6 Description The issue allows remote...

CVE-2017-1106

IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

CVE-2017-1106: Improper Neutralization of Input During Web Page Generation

IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

PT-2017-11723

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 5.2 through 7.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

CVE-2014-4843: Improperly Implemented Security Check for Standard

Curam Universal Access in IBM Curam Social Program Management SPM 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.5 iFix5 allows remote attackers to obtain sensitive information about internal caseworker usernames via vectors related to a URL...

PT-2017-5933

Name of the Vulnerable Software and Affected Versions: IBM Curam Social Program Management SPM versions 6.0 SP2 before EP26 IBM Curam Social Program Management SPM versions 6.0.4 before 6.0.4.6 IBM Curam Social Program Management SPM versions 6.0.5 before 6.0.5.5 iFix5 Description: The issue allo...

IBM Curam Social Program Management Information Disclosure Vulnerability (CNVD-2017-08127)

IBM Cúram Social Program Management is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. An information disclosure vulnerability exists in IBM Curam Social Program Management. An attacker could exploit this...

IBM Curam Social Program Management Cross-Site Scripting Vulnerability (CNVD-2017-08126)

IBM Curam Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. IBM Curam Social Program Management suffers from a cross-site scripting vulnerability that originates from the program...