Latest ibm curam social program management Vulnerabilities

● CVE-2022-22317
IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 218281.
IBM Curam Social Program Management=8.0.0
IBM Curam Social Program Management=8.0.1
HP HP-UX
IBM AIX
Ibm Z\/os
Linux Linux kernel
and 2 more
● CVE-2022-22318
IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.
IBM Curam Social Program Management=8.0.0
IBM Curam Social Program Management=8.0.1
HP HP-UX
IBM AIX
Ibm Z\/os
Linux Linux kernel
and 2 more
● CVE-2021-39068
IBM Curam Social Program Management=7.0.11.0
IBM Curam Social Program Management=8.0.1
● CVE-2020-4779
A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass secu...
IBM Curam Social Program Management=7.0.9.0
IBM Curam Social Program Management=7.0.10.0
● CVE-2020-4778
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram a...
IBM Curam Social Program Management=7.0.9.0
IBM Curam Social Program Management=7.0.10.0
● CVE-2020-4781
An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could result in a denial of service. IBM X-Force ID: 189159.
IBM Curam Social Program Management=7.0.9.0
IBM Curam Social Program Management=7.0.10.0
● CVE-2020-4775
A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows attackers to inject malicious scripts into web applications for th...
IBM Curam Social Program Management=7.0.9.0
IBM Curam Social Program Management=7.0.10.0
● CVE-2020-4776
A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to traverse directories on the system. An attacker could send a spec...
IBM Curam Social Program Management=7.0.9.0
IBM Curam Social Program Management=7.0.10.0
● CVE-2020-4772
An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. A remote attacker could exploit this vulnerability to expose sensitive information...
IBM Curam Social Program Management=7.0.9.0
IBM Curam Social Program Management=7.0.10.0
● CVE-2018-2001
IBM Cram Social Program Management 6.1.1, 6.2.0, 7.0.4, and 7.0.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted fr...
IBM Curam Social Program Management>=6.1.0.0<=6.1.1.6
IBM Curam Social Program Management>=6.2.0.0<=6.2.0.6
IBM Curam Social Program Management>=7.0.0.0<=7.0.4.0
IBM Curam Social Program Management=7.0.5.0
● CVE-2018-1900
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus a...
IBM Curam Social Program Management>=6.0.5.0<=6.0.5.10
IBM Curam Social Program Management>=6.1.0.0<=6.1.1.6
IBM Curam Social Program Management>=6.2.0.0<=6.2.0.6
IBM Curam Social Program Management>=7.0.0.0<=7.0.1.0
IBM Curam Social Program Management>=7.0.2.0<=7.0.4.0
● CVE-2018-1671
IBM Curam Social Program Management 7.0.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within t...
IBM Curam Social Program Management=7.0.3.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203