CVE-2016-6111

IBM Cúram Social Program Management (SPM) is affected by CVE-2016-6111 due to an XML External Entity Injection (XXE) in XML data processing, causing denial of service with potential data exposure and memory depletion. The IBM Security Bulletin lists affected versions across SPM 5.2 SP6 up to 7.0....

CVE-2016-6111: Improper Restriction of XML External Entity Reference

IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

PT-2017-8902

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 6.0 through 7.0 Description The issue is caused by an XML External Entity Injection XXE error when processing XML data, which could allow a remote attacker to expose highly sensitive information or...

IBM Curam Social Program Management Cross-Site Scripting Vulnerability

IBM Curam Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. A cross-site scripting vulnerability exists in IBM Curam SPM version 6.1. A remote attacker can exploit this vulnerabili...

CVE-2015-5023

SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5023

CVE-2015-5023 : IBM Cúram Social Program Management (SPM) 6.1 is vulnerable to SQL injection. The IBM security bulletin notes that an attacker who is already authenticated and has console access can send specially crafted SQL statements to view, modify, or delete data. Affected version: SPM 6.1 (...

PT-2016-3658

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management version 6.1 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For IBM Curam Social Program Management version 6.1, update to version 6.1.1 to resolve...

CVE-2015-5023: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-7402

Cross-site scripting XSS vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2015-7402

IBM Cúram Social Program Management 6.1 is affected by CVE-2015-7402 (XSS) due to improper validation of user-supplied input. An already authenticated remote attacker can exploit a specially crafted URL to execute arbitrary script in the victim’s browser within the site’s context, potentially ste...

CVE-2015-7402: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2016-3758

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 6.1 through 6.1.1.0 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This could potentially lead to unauthoriz...

IBM Cúram Social Program Management SQL注入漏洞

No description provided by source...

IBM Cúram Social Program Management SQL Injection Vulnerability

IBM Curam Social Program Management SPM is a suite of social program management solutions from IBM in the United States. A SQL injection vulnerability exists in IBM Curam SPM. An attacker could use this vulnerability to take control of the application, access or modify data, or exploit potential...

CVE-2014-6192

Cross-site scripting XSS vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 before 6.0.5.6, and 6.0.5.5a before 6.0.5.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-6192

Cross-site scripting XSS vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 before 6.0.5.6, and 6.0.5.5a before 6.0.5.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-6192

CVE-2014-6192 affects IBM Cúram Social Program Management (SPM). The vulnerability is an XSS flaw caused by improper validation of user-supplied input, allowing a remote authenticated user to execute script via a crafted URL. Affected versions include: SPM 6.0 SP2 before EP26, 6.0.4 before 6.0.4....

PT-2015-3832

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 6.0 SP2 before EP26 IBM Curam Social Program Management version 6.0.4 before 6.0.4.5 iFix10 IBM Curam Social Program Management version 6.0.5 before 6.0.5.6 IBM Curam Social Program Management versi...

CVE-2014-6192: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 before 6.0.5.6, and 6.0.5.5a before 6.0.5.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...