CVE-2014-3069

Published: Aug 12, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Multiple CRLF injection vulnerabilities in the Universal Access component in IBM Curam Social Program Management (SPM) 6.0.5.5, when WebSphere Application Server is not used, allow remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified parameters.

Affected (1)

Products: Ibm: Curam Social Program Management

1 product

Curam Social Program Management

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Curam Social Program Management	Version 6.0.5.5

References (6)

http://secunia.com/advisories/59688

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21681213

Source: psirt@us.ibm.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/94839

Source: psirt@us.ibm.com

http://secunia.com/advisories/59688

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-01.ibm.com/support/docview.wss?uid=swg21681213

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/94839

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.