Curam Social Program Management@5.2 Security Vulnerabilities and Issues — Curam Social Program Management@5.2 CVE List

Lucene search

IbmCuram Social Program Management5.2

9 matches found

CVE•added 2017/06/28 6:29 p.m.•42 views

CVE-2017-1106

IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ...

5.4CVSS5.2AI score0.00253EPSS

CVE•added 2017/03/31 6:59 p.m.•37 views

CVE-2016-6111

IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources...

9.1CVSS9.2AI score0.00407EPSS

CVE•added 2014/06/18 4:55 p.m.•34 views

CVE-2014-3013

Multiple cross-site scripting (XSS) vulnerabilities in IBM Curam Social Program Management 4.5 SP10 through 6.0.5.4 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to a (1) custom JSP or (2) custom renderer.

3.5CVSS5.3AI score0.00188EPSS

CVE•added 2017/04/20 9:59 p.m.•34 views

CVE-2016-9979

5.4CVSS5.2AI score0.00258EPSS

CVE•added 2014/06/18 4:55 p.m.•33 views

CVE-2014-3012

Multiple CRLF injection vulnerabilities in IBM Curam Social Program Management 5.2 SP1 through 6.0.5.4 allow remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified parameters to custom JSPs.

3.5CVSS6.8AI score0.00173EPSS

CVE•added 2017/04/20 9:59 p.m.•32 views

CVE-2016-9978

IBM Curam Social Program Management 5.2, 6.0, and 7.0 could allow an authenticated attacker to disclose sensitive information. IBM X-Force ID: 120254.

4.3CVSS4.2AI score0.00204EPSS

CVE•added 2015/04/27 11:59 a.m.•29 views

CVE-2014-6090

Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) DataMappingEditorCommands, (2) DatastoreEditorCommands, and (3) IEGEditorCommands servlets in IBM Curam Social Program Management (SPM) 5.2 SP6 before EP6, 6.0 SP2 before EP26, 6.0.3 before 6.0.3.0 iFix8, 6.0.4 before 6.0.4.5 iFi...

6.8CVSS6.7AI score0.00103EPSS

CVE•added 2017/04/20 9:59 p.m.•29 views

CVE-2016-8923

IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to obtain sensitive information from the profile of a higher privileged user that they should not have access to. IBM X-Force ID: 118536.

4.3CVSS4.1AI score0.00203EPSS

CVE•added 2017/04/20 9:59 p.m.•29 views

CVE-2016-9980

5.4CVSS5.2AI score0.00228EPSS