Login Request a demo
CS
Product
Curam Social Program Management
by IBM · last CVE Jun 20, 2022
46
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities46In the news0Timeline
Severity mix
Critical 3High 7Medium 26Low 0
Severity
All severities46Critical3High7Medium26Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Curam Social Program Management to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-4781
6.5
1%
Oct 12
An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could result in a denial of service
Affected: 7.0.9.0; 7.0.10.0
CVE-2020-4773
6.5
1%
Oct 12
A cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which is an attack that forces a user to execute unwanted…
Affected: 7.0.9.0; 7.0.10.0
CVE-2017-1110
6.5
1%
Aug 28
IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to view the incidents of a higher…
Affected: 6.0.4.0; 6.0.4.1; 6.0.4.2; 6.0.4.3; 6.0.4.4; 6.0.4.5; +33 more
CVE-2018-1654
6.1
1%
Dec 11
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
Affected: 6.0.5; 6.1.1; 6.2.0; 7.0.1; 7.0.3
CVE-2018-1671
6.1
2%
Dec 10
IBM Curam Social Program Management 7.0.3 is vulnerable to HTML injection
Affected: 7.0.3.0
CVE-2017-1195
6.1
1%
Aug 29
IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
Affected: 6.0.4.0; 6.0.4.1; 6.0.4.2; 6.0.4.3; 6.0.4.4; 6.0.4.5; +33 more
CVE-2021-39068
5.4
1%
Apr 11
IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting
Affected: 7.0.11; 8.0.1
CVE-2020-4775
5.4
1%
Oct 12
A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10
Affected: 7.0.9.0; 7.0.10.0
CVE-2020-4774
5.4
1%
Oct 12
An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input
Affected: 7.0.9.0; 7.0.10.0
CVE-2018-1900
5.4
1%
Dec 11
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 is vulnerable to cross-site scripting
Affected: 6.0.5; 6.1.1; 6.2.0; 7.0.1; 7.0.4
CVE-2016-0261
5.4
1%
Mar 12
Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0.0 before SP2 EP29, 6.0.4 before 6.0.4.6 iFix3, 6.0.5 before 6.0.5.9 iFix2, 6.1.0 before 6.1.0.1…
Affected: 6.0.4.0 through 6.0.4.6; 6.0.5.0 through 6.0.5.9; 6.0; 6.0; 6.0.0; 6.1.0.0; +3 more
CVE-2017-1739
5.4
1%
Jan 11
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 is vulnerable to cross-site scripting
Affected: 6.0.5.0; 6.0.5.1; 6.0.5.2; 6.0.5.3; 6.0.5.4; 6.0.5.5; +30 more
CVE-2017-1740
5.4
1%
Jan 11
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting
Affected: 6.0.5; 6.0.5.0; 6.0.5.1; 6.0.5.2; 6.0.5.3; 6.0.5.4; +32 more
CVE-2014-6191
5.4
1%
Sep 19
Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2, 6.0.4, and 6.0.5 allows remote attackers to inject arbitrary web script or HTML via…
Affected: 6.0; 6.0.4.0; 6.0.4.1; 6.0.4.2; 6.0.4.3; 6.0.4.4; +7 more
CVE-2016-9732
5.4
1%
Aug 28
IBM Curam Social Program Management 6.0, 6.1, 6.2 and 7.0 is vulnerable to cross-site scripting
Affected: 6.0.4.0; 6.0.4.1; 6.0.4.2; 6.0.4.3; 6.0.4.4; 6.0.4.5; +33 more
CVE-2017-1106
5.4
1%
Jun 28
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting
Affected: 5.2; 5.2; 5.2; 6.0; 6.0; 6.0.0; +34 more
CVE-2016-9980
5.4
1%
Apr 20
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting
Affected: 6.0.4, 6.0.5, 6.0, 5.2, 4.5, 6.0.3, 6.1, 5.2.6, 6.0.1, 6.1.0, 6.1.1, 6.2.0, 7.0.0
CVE-2016-9979
5.4
1%
Apr 20
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting
Affected: 6.0.4, 6.0.5, 6.0, 5.2, 4.5, 6.0.3, 6.1, 5.2.6, 6.0.1, 6.1.0, 6.1.1, 6.2.0, 7.0.0
CVE-2015-5023
5.4
1%
Jan 3
SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors
Affected: 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; +1 more
CVE-2015-7402
5.4
1%
Jan 2
Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1.1 allows remote authenticated users to inject arbitrary web script or HTML via a…
Affected: 6.1
CVE-2020-4780
5.3
1%
Oct 12
OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10
Affected: 7.0.9.0; 7.0.10.0
CVE-2014-4843
5.3
1%
Jun 8
Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.5 iFix5 allows remote attackers to obtain…
Affected: 6.0; 6.0.4.0; 6.0.4.1; 6.0.4.2; 6.0.4.3; 6.0.4.4; +6 more
CVE-2018-1362
5.0
1%
Jan 19
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the…
Affected: 6.0.5; 6.1.1.0; 6.2.0.0; 7.0.1
CVE-2015-7401
4.3
1%
Mar 26
IBM Curam Social Program Management 6.1.x before 6.1.1.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive document information by…
Affected: 6.1.0.0 before 6.1.1.1
CVE-2016-9978
4.3
1%
Apr 20
IBM Curam Social Program Management 5.2, 6.0, and 7.0 could allow an authenticated attacker to disclose sensitive information
Affected: 6.0.4, 6.0.5, 6.0, 5.2, 4.5, 6.0.3, 6.1, 5.2.6, 6.0.1, 6.1.0, 6.1.1, 6.2.0, 7.0.0
CVE-2016-8923
4.3
1%
Apr 20
IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to obtain sensitive information from the profile of a higher…
Affected: 6.0.4, 6.0.5, 6.0, 5.2, 4.5, 6.0.3, 6.1, 5.2.6, 6.0.1, 6.1.0, 6.1.1, 6.2.0, 7.0.0
Showing 26