5.4
Moyenne
CVE-2020-4774 An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper…
Description
An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By sending a specially-crafted input, a remote attacker could exploit this vulnerability to obtain unauthorized access or reveal sensitive information such as XML document structure and content. IBM X-Force ID: 189152.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Curam SPM 7.0 | 7.0.9 → 7.0.10 | Pas de correctif indiqué |
Autres CVE de Curam SPM
Les 10 CVE de Curam SPM →
CVE-2020-4942
IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an…
6.5
Moyenne
CVE-2020-4781
An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management…
6.5
Moyenne
CVE-2020-4780
OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program…
4.3
Moyenne
CVE-2020-4778
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which…
5.9
Moyenne