CVE-2014-3013

Published: Jun 18, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM Curam Social Program Management 4.5 SP10 through 6.0.5.4 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to a (1) custom JSP or (2) custom renderer.

Affected (17)

Products: Ibm: Curam Social Program Management

Ibm

1 product

Curam Social Program Management

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Ibm Curam Social Program Management	Version 4.5 sp10
Ibm Curam Social Program Management	Version 5.0
Ibm Curam Social Program Management	Version 5.2 sp1
Ibm Curam Social Program Management	Version 5.2 sp4
Ibm Curam Social Program Management	Version 6.0.3.0
Ibm Curam Social Program Management	Version 6.0.4.0
Ibm Curam Social Program Management	Version 6.0.4.1
Ibm Curam Social Program Management	Version 6.0.4.2
Ibm Curam Social Program Management	Version 6.0.4.3
Ibm Curam Social Program Management	Version 6.0.4.4
Ibm Curam Social Program Management	Version 6.0.4.5
Ibm Curam Social Program Management	Version 6.0.5.0
Ibm Curam Social Program Management	Version 6.0.5.1
Ibm Curam Social Program Management	Version 6.0.5.2
Ibm Curam Social Program Management	Version 6.0.5.3
Ibm Curam Social Program Management	Version 6.0.5.4
Ibm Curam Social Program Management	Version 6.0