Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm curam social program management 6.0.4.2 vulnerabilities and exploits

(subscribe to this query)
312
VMScore
CVE-2014-6091
Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management (SPM) 6.0.4 prior to 6.0.4.5 iFix7 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.5
445
VMScore
CVE-2014-6092
IBM Curam Social Program Management (SPM) 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4 prior to 6.0.4.6, and 6.0.5 prior to 6.0.5.6 requires failed-login handling for web-service accounts to have the same lockout policy as for standard user accounts, which makes it easier for r...
Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.1Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program ManagementIbm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0.5.5
312
VMScore
CVE-2014-4803
CRLF injection vulnerability in the Universal Access implementation in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 prior to 6.0.4.5 iFix007, and 6.0.5 prior to 6.0.5.5 iFix003, when WebSphere Application Server is not used, allows remote authenticated users to ...
Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.5.5Ibm Curam Social Program ManagementIbm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.1Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.5
312
VMScore
CVE-2014-6191
Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2, 6.0.4, and 6.0.5 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 98568.
Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.5.1Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.5.5Ibm Curam Social Program Management 6.0Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.2
445
VMScore
CVE-2014-4843
Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 prior to 6.0.4.6, and 6.0.5 prior to 6.0.5.5 iFix5 allows remote malicious users to obtain sensitive information about internal caseworker usernames via vectors related to a URL.
Ibm Curam Social Program Management 6.0Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program Management 6.0.5.1
312
VMScore
CVE-2014-3012
Multiple CRLF injection vulnerabilities in IBM Curam Social Program Management 5.2 SP1 up to and including 6.0.5.4 allow remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified parameters to custom JSPs.
Ibm Curam Social Program Management 5.2Ibm Curam Social Program Management 6.0Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.3.0Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.5.1Ibm Curam Social Program Management 6.0.5.2
312
VMScore
CVE-2014-6192
Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 prior to 6.0.4.5 iFix10, 6.0.5 prior to 6.0.5.6, and 6.0.5.5a prior to 6.0.5.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Ibm Curam Social Program Management 6.0Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program Management 6.0.5.6Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.5.5Ibm Curam Social Program Management 6.0.5.5aIbm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.5.1Ibm Curam Social Program Management 6.0.5.7
312
VMScore
CVE-2014-3013
Multiple cross-site scripting (XSS) vulnerabilities in IBM Curam Social Program Management 4.5 SP10 up to and including 6.0.5.4 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to a (1) custom JSP or (2) custom renderer.
Ibm Curam Social Program Management 5.0Ibm Curam Social Program Management 5.2Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 4.5Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0Ibm Curam Social Program Management 6.0.3.0Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.1
312
VMScore
CVE-2016-9979
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted se...
Ibm Curam Social Program Management 6.0.4.7Ibm Curam Social Program Management 6.0.4.8Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.4.6Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.5.1Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program Management 6.0.5.9Ibm Curam Social Program Management 6.0.5Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.5.7Ibm Curam Social Program Management 6.0.5.8Ibm Curam Social Program Management 6.0.5.5Ibm Curam Social Program Management 6.0.5.6Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.1.0.0Ibm Curam Social Program Management 6.1.0.3
578
VMScore
CVE-2014-8903
IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 prior to 6.0.4.5iFix10 and 6.0.5 prior to 6.0.5.6 allows remote authenticated users to load arbitrary Java classes via unspecified vectors.
Ibm Curam Social Program Management 6.0.5Ibm Curam Social Program Management 6.0.5.0Ibm Curam Social Program Management 6.0.4.3Ibm Curam Social Program Management 6.0.4.4Ibm Curam Social Program Management 6.0.4.5Ibm Curam Social Program Management 6.0.4.6Ibm Curam Social Program Management 6.0.5.1Ibm Curam Social Program Management 6.0.5.3Ibm Curam Social Program Management 6.0.5.10Ibm Curam Social Program Management 6.0.4.1Ibm Curam Social Program Management 6.0.4.8Ibm Curam Social Program Management 6.0Ibm Curam Social Program Management 6.0.5.5Ibm Curam Social Program Management 6.0.5.6Ibm Curam Social Program Management 6.0.5.7Ibm Curam Social Program Management 6.0.5.8Ibm Curam Social Program Management 6.0.5.2Ibm Curam Social Program Management 6.0.5.4Ibm Curam Social Program Management 6.0.5.9Ibm Curam Social Program Management 6.0.4.0Ibm Curam Social Program Management 6.0.4.2Ibm Curam Social Program Management 6.0.4.7
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereferenceCVE-2023-52689CVE-2024-23803client sideCVE-2023-52696information disclosureCVE-2024-35843CVE-2024-27130CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook