Login Request a demo
CS
Product
Curam SPM
by IBM · last CVE Jan 4, 2021
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 5Medium 5Low 0
Severity
All severities10Critical0High5Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Curam SPM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-4942
8.8
1%
Jan 4
IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
Affected: 7.0.9; 7.0.11
CVE-2020-4779
8.1
1%
Oct 12
A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10
Affected: 7.0.9; 7.0.10
CVE-2020-4772
8.1
1%
Oct 12
An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10
Affected: 7.0.9; 7.0.10
CVE-2020-4778
7.5
1%
Oct 12
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used…
Affected: 7.0.9; 7.0.10
CVE-2020-4776
7.5
2%
Oct 12
A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to traverse directories on the system
Affected: 7.0.9; 7.0.10
Showing 5