5.4
Medium
CVE-2020-4775 A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10
Description
A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows attackers to inject malicious scripts into web applications for the purpose of running unwanted actions on the end user's device, restricted to a single location. IBM X-Force ID: 189153.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Curam SPM 7.0 | 7.0.9 → 7.0.10 | No fix stated |
Other CVEs of Curam SPM
The 10 CVEs of Curam SPM →
CVE-2020-4942
IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an…
6.5
Medium
CVE-2020-4781
An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management…
6.5
Medium
CVE-2020-4780
OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program…
4.3
Medium
CVE-2020-4778
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which…
5.9
Medium