PT-2018-6510

Name of the Vulnerable Software and Affected Versions: IBM Curam Social Program Management versions 6.0.5, 6.1.1, 6.2.0, 7.0.1, 7.0.2 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

PT-2018-6509

Name of the Vulnerable Software and Affected Versions: IBM Curam Social Program Management versions 6.0.5, 6.1.1, 6.2.0, and 7.0.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...

IBM Cúram Social Program Management Cross-Site Scripting Vulnerability (CNVD-2017-33074)

IBM Curam Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. A cross-site scripting vulnerability exists in IBM Curam SPM. A remote attacker could exploit this vulnerability to inje...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Curam Social Program Management 6.0 SP2, 6.0.4, and 6.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 98568...

CVE-2014-6191

CVE-2014-6191 affects IBM Cúram SPM: vulnerable versions are 6.0 SP2, 6.0.4, and 6.0.5, due to improper validation/sanitization of user-supplied input that enables cross-site scripting. Remote attacker could exploit via a specially crafted URL to run script in a victim’s browser, potentially comp...

CVE-2014-6191

Cross-site scripting XSS vulnerability in IBM Curam Social Program Management 6.0 SP2, 6.0.4, and 6.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 98568...

PT-2017-5966

Name of the Vulnerable Software and Affected Versions: IBM Curam Social Program Management versions 6.0 SP2 through 6.0.5 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations: For versions 6.0 SP2...

CVE-2014-6191: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Curam Social Program Management 6.0 SP2, 6.0.4, and 6.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 98568...

IBM Cúram Social Program Management Open Redirect Vulnerability

IBM Cúram Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. An open redirection vulnerability exists in IBM Cúram SPM. A remote attacker could exploit this vulnerability by trickin...

CVE-2017-1195

IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to...

CVE-2017-1195

IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to...

CVE-2017-1195

IBM Curam Social Program Management (SPM) is affected by CVE-2017-1195 due to a phishing/open-redirect vulnerability in the Resource Store servlet. Affected versions include 7.0.0.0–7.0.0.1 and 6.2.0.0–6.2.0.4, 6.1.1.0–6.1.1.4, 6.1.0.0–6.1.0.4, and 6.0.5.0–6.0.5.10, 6.0.4.0–6.0.4.9. An attacker c...

CVE-2017-1195

IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to...

CVE-2017-1110

IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to view the incidents of a higher privileged user. IBM X-Force ID: 120915...

CVE-2016-9732

IBM Curam Social Program Management 6.0, 6.1, 6.2 and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

Design/Logic Flaw

IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to view the incidents of a higher privileged user. IBM X-Force ID: 120915...

Cross site scripting

IBM Curam Social Program Management 6.0, 6.1, 6.2 and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

IBM Curam Social Program Management Elevation of Privilege Vulnerability

IBM Curam Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. An elevation of privilege vulnerability exists in IBM Curam SPM. A remote attacker could exploit this vulnerability to...

PT-2017-12320

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 6.0 through 7.0 Description The issue allows a remote attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, the attacker...

CVE-2017-1110: Exposure of Sensitive Information to an Unauthorized Actor

IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to view the incidents of a higher privileged user. IBM X-Force ID: 120915...