Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm curam social program management 5.2 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2014-6090
Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) DataMappingEditorCommands, (2) DatastoreEditorCommands, and (3) IEGEditorCommands servlets in IBM Curam Social Program Management (SPM) 5.2 SP6 before EP6, 6.0 SP2 before EP26, 6.0.3 prior to 6.0.3.0 iFix8, 6.0...
Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 5.2Ibm Curam Social Program Management 6.0.3.0
3.5
CVSSv2
CVE-2014-3012
Multiple CRLF injection vulnerabilities in IBM Curam Social Program Management 5.2 SP1 up to and including 6.0.5.4 allow remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified parameters to custom JSPs.
Ibm Curam Social Program Management 5.2Ibm Curam Social Program Management 6.0Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.3.0Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.5.1Ibm Curam Social Program Management 6.0.5.2
3.5
CVSSv2
CVE-2014-3013
Multiple cross-site scripting (XSS) vulnerabilities in IBM Curam Social Program Management 4.5 SP10 up to and including 6.0.5.4 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to a (1) custom JSP or (2) custom renderer.
Ibm Curam Social Program Management 5.0Ibm Curam Social Program Management 5.2Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 4.5Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0Ibm Curam Social Program Management 6.0.3.0Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.1
3.5
CVSSv2
CVE-2016-9979
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted se...
Ibm Curam Social Program Management 6.0.4.7Ibm Curam Social Program Management 6.0.4.8Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.4.6Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.5.1Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program Management 6.0.5.9Ibm Curam Social Program Management 6.0.5Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.7Ibm Curam Social Program Management 6.0.5.8Ibm Curam Social Program Management 6.0.5.5Ibm Curam Social Program Management 6.0.5.6Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.1.0.0Ibm Curam Social Program Management 6.1.0.3
4
CVSSv2
CVE-2016-9978
IBM Curam Social Program Management 5.2, 6.0, and 7.0 could allow an authenticated malicious user to disclose sensitive information. IBM X-Force ID: 120254.
Ibm Curam Social Program Management 5.2Ibm Curam Social Program Management 6.0Ibm Curam Social Program Management 6.0.0Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.7Ibm Curam Social Program Management 6.0.4.8Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.4.6Ibm Curam Social Program Management 6.0.5.1Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program Management 6.0.5.9Ibm Curam Social Program Management 6.0.5Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.7Ibm Curam Social Program Management 6.0.5.8Ibm Curam Social Program Management 6.0.5.5Ibm Curam Social Program Management 6.0.5.6Ibm Curam Social Program Management 6.0.5.3
3.5
CVSSv2
CVE-2017-1106
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted se...
Ibm Curam Social Program Management 5.2Ibm Curam Social Program Management 6.0Ibm Curam Social Program Management 6.0.0Ibm Curam Social Program Management 6.0.4.6Ibm Curam Social Program Management 6.0.4.7Ibm Curam Social Program Management 6.0.4.8Ibm Curam Social Program Management 6.0.4.9Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.5.5Ibm Curam Social Program Management 6.0.5.6Ibm Curam Social Program Management 6.0.5.10Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program Management 6.0.5.7Ibm Curam Social Program Management 6.0.5.9
4
CVSSv2
CVE-2016-8923
IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to obtain sensitive information from the profile of a higher privileged user that they should not have access to. IBM X-Force ID: 118536.
Ibm Curam Social Program Management 5.2Ibm Curam Social Program Management 6.0.0Ibm Curam Social Program Management 6.0Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.4.6Ibm Curam Social Program Management 6.0.4.7Ibm Curam Social Program Management 6.0.4.8Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.5Ibm Curam Social Program Management 6.0.5.6Ibm Curam Social Program Management 6.0.5.7Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.5.5Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.1Ibm Curam Social Program Management 6.0.5.8
3.5
CVSSv2
CVE-2016-9980
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted se...
Ibm Curam Social Program Management 5.2Ibm Curam Social Program Management 6.0Ibm Curam Social Program Management 6.0.0Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.7Ibm Curam Social Program Management 6.0.4.8Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.4.6Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.5Ibm Curam Social Program Management 6.0.5.7Ibm Curam Social Program Management 6.0.5.8Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.5.5Ibm Curam Social Program Management 6.0.5.6Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.1
8.5
CVSSv2
CVE-2016-6111
IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all availab...
Ibm Curam Social Program Management 5.2Ibm Curam Social Program Management 6.0.0Ibm Curam Social Program Management 6.0Ibm Curam Social Program Management 6.0.4.6Ibm Curam Social Program Management 6.0.4.8Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.7Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.5.6Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.5.7Ibm Curam Social Program Management 6.0.5.8Ibm Curam Social Program Management 6.0.5.9Ibm Curam Social Program Management 6.0.5Ibm Curam Social Program Management 6.0.5.5Ibm Curam Social Program Management 6.0.5.1
5
CVSSv2
CVE-2014-6092
IBM Curam Social Program Management (SPM) 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4 prior to 6.0.4.6, and 6.0.5 prior to 6.0.5.6 requires failed-login handling for web-service accounts to have the same lockout policy as for standard user accounts, which makes it easier for r...
Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.1Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program ManagementIbm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0.5.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook