Curam Social Program Management@4.5 Security Vulnerabilities and Issues — Curam Social Program Management@4.5 CVE List

Lucene search

IbmCuram Social Program Management4.5

5 matches found

CVE•added 2014/06/18 4:55 p.m.•34 views

CVE-2014-3013

Multiple cross-site scripting (XSS) vulnerabilities in IBM Curam Social Program Management 4.5 SP10 through 6.0.5.4 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to a (1) custom JSP or (2) custom renderer.

3.5CVSS5.3AI score0.00188EPSS

CVE•added 2017/04/20 9:59 p.m.•34 views

CVE-2016-9979

IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ...

5.4CVSS5.2AI score0.00258EPSS

CVE•added 2017/04/20 9:59 p.m.•32 views

CVE-2016-9978

IBM Curam Social Program Management 5.2, 6.0, and 7.0 could allow an authenticated attacker to disclose sensitive information. IBM X-Force ID: 120254.

4.3CVSS4.2AI score0.00204EPSS

CVE•added 2017/04/20 9:59 p.m.•29 views

CVE-2016-8923

IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to obtain sensitive information from the profile of a higher privileged user that they should not have access to. IBM X-Force ID: 118536.

4.3CVSS4.1AI score0.00203EPSS

CVE•added 2017/04/20 9:59 p.m.•29 views

CVE-2016-9980

5.4CVSS5.2AI score0.00228EPSS