IBM Curam Social Program Management 7.0.9.0
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:curam_social_program_management:7.0.9.0:*:*:*:*:*:*:*
part: a version: 7.0.9.0 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Curam Social Program Management (da45a0ea-875f-564c-a833-36b58978e15f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-4942 |
vulnerable | 2026-06-08 05:26:41.216498 |
Details available
MEDIUM (6.5)
IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191942.
Published: 2021-01-04T14:00:39.581Z
Updated: 2024-09-16T21:56:52.515Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4781 |
vulnerable | 2026-06-08 05:26:40.906301 |
Details available
MEDIUM (6.5)
An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could result in a denial of service. IBM X-Force ID: 189159.
Published: 2020-10-12T13:05:39.850Z
Updated: 2024-09-17T03:37:25.301Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4780 |
vulnerable | 2026-06-08 05:26:40.905851 |
Details available
MEDIUM (4.3)
OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The purpose of the 'secure' attribute is to prevent cookies from being observed by unauthorized parties. IBM X-Force ID: 189158.
Published: 2020-10-12T13:05:39.409Z
Updated: 2024-09-17T00:11:25.417Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4779 |
vulnerable | 2026-06-08 05:26:40.905476 |
Details available
HIGH (8.1)
A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass security access controls. IBM X-Force ID: 189156.
Published: 2020-10-12T13:05:38.969Z
Updated: 2024-09-16T20:12:01.163Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4778 |
vulnerable | 2026-06-08 05:26:40.904917 |
Details available
MEDIUM (5.9)
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156.
Published: 2020-10-12T13:05:38.522Z
Updated: 2024-09-17T03:54:20.072Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4776 |
vulnerable | 2026-06-08 05:26:40.904399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4775 |
vulnerable | 2026-06-08 05:26:40.903720 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4774 |
vulnerable | 2026-06-08 05:26:40.903157 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4773 |
vulnerable | 2026-06-08 05:26:40.902627 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4772 |
vulnerable | 2026-06-08 05:26:40.901498 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.