CS
Product
Curam Social Program Management
46
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 26Low 0
Watch
Add Curam Social Program Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-4942 | 8.8 | Jan 4 | IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… Affected: 7.0.9.0; 7.0.11.0 |
| CVE-2018-2001 | 8.8 | May 7 | IBM Cram Social Program Management 6.1.1, 6.2.0, 7.0.4, and 7.0.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized… Affected: 6.1.0.0 through 6.1.1.6; 6.2.0.0 through 6.2.0.6; 7.0.0.0 through 7.0.4.0; 7.0.5.0 |
| CVE-2014-8903 | 8.8 | Aug 2 | IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5iFix10 and 6.0.5 before 6.0.5.6 allows remote authenticated users to load arbitrary Java classes via… Affected: 6.0; 6.0.4.0; 6.0.4.1; 6.0.4.2; 6.0.4.3; 6.0.4.4; +17 more |
| CVE-2020-4779 | 8.1 | Oct 12 | A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10 Affected: 7.0.9.0; 7.0.10.0 |
| CVE-2020-4772 | 8.1 | Oct 12 | An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10 Affected: 7.0.9.0; 7.0.10.0 |
| CVE-2020-4778 | 7.5 | Oct 12 | IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used… Affected: 7.0.9.0; 7.0.10.0 |
| CVE-2020-4776 | 7.5 | Oct 12 | A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to traverse directories on the system Affected: 7.0.9.0; 7.0.10.0 |
Showing 7