CVE-2020-4774: Medium severity IBM Curam Social Program Management vulnerability
An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By sending a specially-crafted input, a remote attacker could exploit this vulnerability to obtain unauthorized access or reveal sensitive information such as XML document structure and content. IBM X-Force ID: 189152.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-4774?
The severity of CVE-2020-4774 is medium.
How does CVE-2020-4774 impact IBM Curam Social Program Management?
CVE-2020-4774 can potentially result in unauthorized access or disclosure of sensitive information in IBM Curam Social Program Management 7.0.9 and 7.0.10.
How can a remote attacker exploit CVE-2020-4774?
A remote attacker can exploit CVE-2020-4774 by sending a specially-crafted input to obtain unauthorized access or reveal sensitive information.
Which versions of IBM Curam Social Program Management are affected by CVE-2020-4774?
IBM Curam Social Program Management versions 7.0.9 and 7.0.10 are affected by CVE-2020-4774.
Is there a fix available for CVE-2020-4774?
Please refer to the official IBM support pages for information on patches or updates to address CVE-2020-4774.