Curam Social Program Management
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:curam_social_program_management:*:sp6:*:*:*:*:*:*
part: a version: * update: sp6
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Curam Social Program Management (da45a0ea-875f-564c-a833-36b58978e15f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-6092 |
vulnerable | 2026-06-08 05:05:56.253794 |
Details available
IBM Curam Social Program Management (SPM) 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.6 requires failed-login handling for web-service accounts to have the same lockout policy as for standard user accounts, which makes it easier for remote attackers to cause a denial of service (web-service outage) by making many login attempts with a valid caseworker account name.
Published: 2015-04-27T01:00:00.000Z
Updated: 2024-08-06T12:03:02.337Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4804 |
vulnerable | 2026-06-08 05:05:46.003733 |
Details available
Curam Universal Access in IBM Curam Social Program Management 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4.5 before iFix007, 6.0.5.4 before iFix005, and 6.0.5.5 before iFix003, when SPI inclusion is enabled, allows remote attackers to obtain sensitive user data by visiting an unspecified page.
Published: 2015-02-14T02:00:00.000Z
Updated: 2024-08-06T11:27:36.935Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.