Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:curam_social_program_management:6.0.5:*:*:*:*:*:*:*

part: a version: 6.0.5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCuram Social Program Management (da45a0ea-875f-564c-a833-36b58978e15f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1362 vulnerable 2026-06-08 05:11:17.793181 Details available
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380.
Published: 2018-01-19T14:00:00.000Z
Updated: 2024-09-16T19:30:47.699Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1740 vulnerable 2026-06-08 05:09:22.971834 Details available
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134922.
Published: 2018-01-11T17:00:00.000Z
Updated: 2024-09-16T19:47:27.829Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1195 vulnerable 2026-06-08 05:09:21.336103 Details available
IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 123670.
Published: 2017-08-29T21:00:00.000Z
Updated: 2024-09-16T16:52:56.227Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1110 vulnerable 2026-06-08 05:09:12.967488 Details available
IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to view the incidents of a higher privileged user. IBM X-Force ID: 120915.
Published: 2017-08-28T20:00:00.000Z
Updated: 2024-09-16T21:08:05.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1106 vulnerable 2026-06-08 05:09:12.945320 Details available
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120744.
Published: 2017-06-28T18:00:00.000Z
Updated: 2024-09-16T18:07:51.657Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9980 vulnerable 2026-06-08 05:08:25.158641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9979 vulnerable 2026-06-08 05:08:25.157092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9978 vulnerable 2026-06-08 05:08:25.156069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9732 vulnerable 2026-06-08 05:08:24.395254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8923 vulnerable 2026-06-08 05:08:22.083226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6111 vulnerable 2026-06-08 05:07:58.891332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5023 vulnerable 2026-06-08 05:06:48.605823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8903 vulnerable 2026-06-08 05:06:10.358234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.