Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm curam social program management vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2022-22318
IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.
Ibm Curam Social Program Management 8.0.0
Ibm Curam Social Program Management 8.0.1
9.8
CVSSv3
CVE-2022-22317
IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 218281.
Ibm Curam Social Program Management 8.0.0
Ibm Curam Social Program Management 8.0.1
5.4
CVSSv3
CVE-2021-39068
IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted ses...
Ibm Curam Social Program Management 7.0.11.0
Ibm Curam Social Program Management 8.0.1
8.8
CVSSv3
CVE-2020-4942
IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an malicious user to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191942.
Ibm Curam Social Program Management 7.0.9.0
Ibm Curam Social Program Management 7.0.11.0
8.1
CVSSv3
CVE-2020-4772
An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. A remote attacker could exploit this vulnerability to expose sensitive information, denial of service, server side request forgery or consume memory resources. IB...
Ibm Curam Social Program Management 7.0.9.0
Ibm Curam Social Program Management 7.0.10.0
6.5
CVSSv3
CVE-2020-4773
A cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which is an attack that forces a user to execute unwanted actions on the web application while they are currently authenticated. This applies to a single server clas...
Ibm Curam Social Program Management 7.0.9.0
Ibm Curam Social Program Management 7.0.10.0
5.4
CVSSv3
CVE-2020-4774
An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By sending a specially-crafted input, a remote attacker could exploit this vulnerability to obtain unauthorized access or reveal sensiti...
Ibm Curam Social Program Management 7.0.9.0
Ibm Curam Social Program Management 7.0.10.0
5.4
CVSSv3
CVE-2020-4775
A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows malicious users to inject malicious scripts into web applications for the purpose of running unwanted actions on the end user's device, restr...
Ibm Curam Social Program Management 7.0.9.0
Ibm Curam Social Program Management 7.0.10.0
7.5
CVSSv3
CVE-2020-4778
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156.
Ibm Curam Social Program Management 7.0.9.0
Ibm Curam Social Program Management 7.0.10.0
8.1
CVSSv3
CVE-2020-4779
A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass security access controls. IBM X-Force ID: 189156.
Ibm Curam Social Program Management 7.0.9.0
Ibm Curam Social Program Management 7.0.10.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080
log injection
CVE-2024-6041
CVE-2024-37661
XML external entity
CVE-2024-0845
privilege escalation
CVE-2023-37057
CVE-2024-27801
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »