CVE-2016-9978: Exposure of Sensitive Information to an Unauthorized Actor

IBM Curam Social Program Management 5.2, 6.0, and 7.0 could allow an authenticated attacker to disclose sensitive information. IBM X-Force ID: 120254...

PT-2017-10405

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 5.2 through 7.0 Description The issue allows an authenticated attacker to disclose sensitive information. Recommendations For versions 5.2 through 7.0, update to a version that includes a fix for th...

PT-2017-10406

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 5.2 through 7.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

CVE-2016-9979: Improper Neutralization of Input During Web Page Generation

IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

CVE-2016-8923: Exposure of Sensitive Information to an Unauthorized Actor

IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to obtain sensitive information from the profile of a higher privileged user that they should not have access to. IBM X-Force ID: 118536...

CVE-2016-6111

IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

Xxe

IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

CVE-2016-6111

IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

CVE-2016-6111

IBM Cúram Social Program Management (SPM) is affected by CVE-2016-6111 due to an XML External Entity Injection (XXE) in XML data processing, causing denial of service with potential data exposure and memory depletion. The IBM Security Bulletin lists affected versions across SPM 5.2 SP6 up to 7.0....

CVE-2016-6111

IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

PT-2017-8902

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 6.0 through 7.0 Description The issue is caused by an XML External Entity Injection XXE error when processing XML data, which could allow a remote attacker to expose highly sensitive information or...

IBM Cúram Social Program Management XML External Entity Injection Vulnerability

IBM Cúram Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. IBM Cúram Social Program Management suffers from an XML external entity injection vulnerability. A remote attacker cou...

CVE-2016-6111: Improper Restriction of XML External Entity Reference

IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

Sql injection

SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5023

CVE-2015-5023 : IBM Cúram Social Program Management (SPM) 6.1 is vulnerable to SQL injection. The IBM security bulletin notes that an attacker who is already authenticated and has console access can send specially crafted SQL statements to view, modify, or delete data. Affected version: SPM 6.1 (...

PT-2016-3658

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management version 6.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For IBM Curam Social Program Management version 6.1, update to version 6.1.1 to resolve...

CVE-2015-5023: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-7402

Cross-site scripting XSS vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-7402

IBM Cúram Social Program Management 6.1 is affected by CVE-2015-7402 (XSS) due to improper validation of user-supplied input. An already authenticated remote attacker can exploit a specially crafted URL to execute arbitrary script in the victim’s browser within the site’s context, potentially ste...

PT-2016-3758

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 6.1 through 6.1.1.0 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This could potentially lead to unauthoriz...