Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ibm curam social program management vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2020-4776
A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote malicious user to traverse directories on the system. An attacker could send a specially-crafted file path in URL request to view arbitrary files on the syst...
Ibm Curam Social Program Management 7.0.9.0
Ibm Curam Social Program Management 7.0.10.0
5
CVSSv2
CVE-2020-4778
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156.
Ibm Curam Social Program Management 7.0.9.0
Ibm Curam Social Program Management 7.0.10.0
5.5
CVSSv2
CVE-2020-4779
A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass security access controls. IBM X-Force ID: 189156.
Ibm Curam Social Program Management 7.0.9.0
Ibm Curam Social Program Management 7.0.10.0
5
CVSSv2
CVE-2020-4780
OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of the 'secure' attribute is to prevent cookies from being observed by unauthorized parties. IBM X-Force ID: 189158.
Ibm Curam Social Program Management 7.0.9.0
Ibm Curam Social Program Management 7.0.10.0
6.8
CVSSv2
CVE-2020-4942
IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an malicious user to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191942.
Ibm Curam Social Program Management 7.0.9.0
Ibm Curam Social Program Management 7.0.11.0
3.5
CVSSv2
CVE-2020-4775
A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows malicious users to inject malicious scripts into web applications for the purpose of running unwanted actions on the end user's device, restr...
Ibm Curam Social Program Management 7.0.9.0
Ibm Curam Social Program Management 7.0.10.0
3.5
CVSSv2
CVE-2021-39068
IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted ses...
Ibm Curam Social Program Management 7.0.11.0
Ibm Curam Social Program Management 8.0.1
5.8
CVSSv2
CVE-2018-1654
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 could allow a remote malicious user to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerabili...
Ibm Curam Social Program Management
4
CVSSv2
CVE-2015-7401
IBM Curam Social Program Management 6.1.x prior to 6.1.1.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive document information by guessing the document id. IBM X-Force ID: 107106.
Ibm Curam Social Program Management
3.5
CVSSv2
CVE-2014-3096
Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management prior to 6.0.5.5a allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Ibm Curam Social Program Management
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
validation
CVE-2012-1823
malicious code
CVE-2024-5770
CVE-2023-45866
CVE-2024-35687
local users
CVE-2024-31246
CVE-2024-35730
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »