Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:curam_social_program_management:6.1.1.0:*:*:*:*:*:*:*

part: a version: 6.1.1.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCuram Social Program Management (da45a0ea-875f-564c-a833-36b58978e15f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1362 vulnerable 2026-06-08 05:11:17.794080 Details available
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380.
Published: 2018-01-19T14:00:00.000Z
Updated: 2024-09-16T19:30:47.699Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1740 vulnerable 2026-06-08 05:09:22.972143 Details available
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134922.
Published: 2018-01-11T17:00:00.000Z
Updated: 2024-09-16T19:47:27.829Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1739 vulnerable 2026-06-08 05:09:22.965080 Details available
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134921.
Published: 2018-01-11T17:00:00.000Z
Updated: 2024-09-17T03:13:43.492Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1195 vulnerable 2026-06-08 05:09:21.346880 Details available
IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 123670.
Published: 2017-08-29T21:00:00.000Z
Updated: 2024-09-16T16:52:56.227Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1110 vulnerable 2026-06-08 05:09:12.967771 Details available
IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to view the incidents of a higher privileged user. IBM X-Force ID: 120915.
Published: 2017-08-28T20:00:00.000Z
Updated: 2024-09-16T21:08:05.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1106 vulnerable 2026-06-08 05:09:12.955322 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9980 vulnerable 2026-06-08 05:08:25.158881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9979 vulnerable 2026-06-08 05:08:25.157450 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9978 vulnerable 2026-06-08 05:08:25.156330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9732 vulnerable 2026-06-08 05:08:24.398465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8923 vulnerable 2026-06-08 05:08:22.090525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6111 vulnerable 2026-06-08 05:07:58.899827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0261 vulnerable 2026-06-08 05:07:14.674211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.