| CVE-2020-4942 |
IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an…
|
6.5
Medium
|
Jan 4, 2021 |
| CVE-2020-4780 |
OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program…
|
4.3
Medium
|
Oct 12, 2020 |
| CVE-2020-4781 |
An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management…
|
6.5
Medium
|
Oct 12, 2020 |
| CVE-2020-4779 |
A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10
|
8.1
High
|
Oct 12, 2020 |
| CVE-2020-4778 |
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which…
|
5.9
Medium
|
Oct 12, 2020 |
| CVE-2020-4776 |
A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a…
|
5.3
Medium
|
Oct 12, 2020 |
| CVE-2020-4775 |
A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10
|
5.4
Medium
|
Oct 12, 2020 |
| CVE-2020-4774 |
An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper…
|
5.4
Medium
|
Oct 12, 2020 |
| CVE-2020-4773 |
A cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which…
|
6.5
Medium
|
Oct 12, 2020 |
| CVE-2020-4772 |
An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10
|
7.1
High
|
Oct 12, 2020 |