CS
Product
Curam SPM
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 5Low 0
Watch
Add Curam SPM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-4781 | 6.5 | Oct 12 | An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could result in a denial of service Affected: 7.0.9; 7.0.10 |
| CVE-2020-4773 | 6.5 | Oct 12 | A cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which is an attack that forces a user to execute unwanted… Affected: 7.0.9; 7.0.10 |
| CVE-2020-4775 | 5.4 | Oct 12 | A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10 Affected: 7.0.9; 7.0.10 |
| CVE-2020-4774 | 5.4 | Oct 12 | An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input Affected: 7.0.9; 7.0.10 |
| CVE-2020-4780 | 5.3 | Oct 12 | OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10 Affected: 7.0.9; 7.0.10 |
Showing 5
