Cram Social Program Management

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cram_social_program_management:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCram Social Program Management (ab596ccb-428d-59e4-b921-02fe92bedf23)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-2001 vulnerable 2026-06-08 05:11:29.907563 Details available
MEDIUM (4.3)
IBM Cram Social Program Management 6.1.1, 6.2.0, 7.0.4, and 7.0.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 154891.
Published: 2019-05-07T18:35:20.747Z
Updated: 2024-09-17T03:58:51.036Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1362 vulnerable 2026-06-08 05:11:17.792322 Details available
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380.
Published: 2018-01-19T14:00:00.000Z
Updated: 2024-09-16T19:30:47.699Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1740 vulnerable 2026-06-08 05:09:22.971791 Details available
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134922.
Published: 2018-01-11T17:00:00.000Z
Updated: 2024-09-16T19:47:27.829Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1739 vulnerable 2026-06-08 05:09:22.961161 Details available
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134921.
Published: 2018-01-11T17:00:00.000Z
Updated: 2024-09-17T03:13:43.492Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1195 vulnerable 2026-06-08 05:09:21.329699 Details available
IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 123670.
Published: 2017-08-29T21:00:00.000Z
Updated: 2024-09-16T16:52:56.227Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1110 vulnerable 2026-06-08 05:09:12.967253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1106 vulnerable 2026-06-08 05:09:12.934293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9732 vulnerable 2026-06-08 05:08:24.393206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.