Curam Spm (Ibm) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2021-01-04. Vendor: Ibm.
CVEs of Curam Spm
- CVE-2020-4942 - CVSS 8.8 (high), 2021-01-04: IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and…
- CVE-2020-4779 - CVSS 8.1 (high), 2020-10-12: A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. By sending a specially-crafted request, an attacker could…
- CVE-2020-4778 - CVSS 7.5 (high), 2020-10-12: IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256…
- CVE-2020-4781 - CVSS 6.5 (medium), 2020-10-12: An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could result in a…
- CVE-2020-4780 - CVSS 5.3 (medium), 2020-10-12: OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of…
- CVE-2020-4775 - CVSS 5.4 (medium), 2020-10-12: A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows attackers to inject…
- CVE-2020-4774 - CVSS 5.4 (medium), 2020-10-12: An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By sending a…
- CVE-2020-4773 - CVSS 6.5 (medium), 2020-10-12: A cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which is an attack that forces a user to…
- CVE-2020-4776 - CVSS 7.5 (high), 2020-10-12: A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to traverse directories on…
- CVE-2020-4772 - CVSS 8.1 (high), 2020-10-12: An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. A remote attacker could exploit this…
