Login Request a demo
CS
Product
Curam SPM
by IBM · last CVE Jan 4, 2021
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 5Medium 5Low 0
Severity
All severities10Critical0High5Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Curam SPM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-4942
8.8
1%
Jan 4
IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
Affected: 7.0.9; 7.0.11
CVE-2020-4779
8.1
1%
Oct 12
A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10
Affected: 7.0.9; 7.0.10
CVE-2020-4772
8.1
1%
Oct 12
An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10
Affected: 7.0.9; 7.0.10
CVE-2020-4778
7.5
1%
Oct 12
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used…
Affected: 7.0.9; 7.0.10
CVE-2020-4776
7.5
2%
Oct 12
A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to traverse directories on the system
Affected: 7.0.9; 7.0.10
CVE-2020-4781
6.5
1%
Oct 12
An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could result in a denial of service
Affected: 7.0.9; 7.0.10
CVE-2020-4773
6.5
1%
Oct 12
A cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which is an attack that forces a user to execute unwanted…
Affected: 7.0.9; 7.0.10
CVE-2020-4775
5.4
1%
Oct 12
A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10
Affected: 7.0.9; 7.0.10
CVE-2020-4774
5.4
1%
Oct 12
An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input
Affected: 7.0.9; 7.0.10
CVE-2020-4780
5.3
1%
Oct 12
OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10
Affected: 7.0.9; 7.0.10
Showing 10