Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:curam_social_program_management:5.2:sp4:*:*:*:*:*:*

part: a version: 5.2 update: sp4

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCuram Social Program Management (da45a0ea-875f-564c-a833-36b58978e15f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1106 vulnerable 2026-06-08 05:09:12.935816 Details available
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120744.
Published: 2017-06-28T18:00:00.000Z
Updated: 2024-09-16T18:07:51.657Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9980 vulnerable 2026-06-08 05:08:25.158408 Details available
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120256.
Published: 2017-04-20T21:00:00.000Z
Updated: 2024-08-06T03:07:31.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9978 vulnerable 2026-06-08 05:08:25.155821 Details available
IBM Curam Social Program Management 5.2, 6.0, and 7.0 could allow an authenticated attacker to disclose sensitive information. IBM X-Force ID: 120254.
Published: 2017-04-20T21:00:00.000Z
Updated: 2024-08-06T03:07:31.385Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8923 vulnerable 2026-06-08 05:08:22.076280 Details available
IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to obtain sensitive information from the profile of a higher privileged user that they should not have access to. IBM X-Force ID: 118536.
Published: 2017-04-20T21:00:00.000Z
Updated: 2024-08-06T02:35:02.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6111 vulnerable 2026-06-08 05:07:58.884376 Details available
IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000833.
Published: 2017-03-31T18:00:00.000Z
Updated: 2024-08-06T01:22:20.742Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3013 vulnerable 2026-06-08 05:05:30.671759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3012 vulnerable 2026-06-08 05:05:30.663292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.