5.9
Moyenne
CVE-2022-22318 IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an…
Description
IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Curam Social Program Management 8.0 | 8.0.0 → 8.0.1 | Pas de correctif indiqué |
Autres CVE de Curam Social Program Management
Les 9 CVE de Curam Social Program Management →
CVE-2022-22317
IBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an…
5.9
Moyenne
CVE-2021-39068
IBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2018-1654
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 could allow a remote attacker to conduct…
6.8
Moyenne
CVE-2018-1900
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 is vulnerable to cross-site scripting
5.4
Moyenne