CVE-2016-0261

Published: Mar 12, 2018Modified: Nov 21, 2024

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0.0 before SP2 EP29, 6.0.4 before 6.0.4.6 iFix3, 6.0.5 before 6.0.5.9 iFix2, 6.1.0 before 6.1.0.1 iFix1, and 6.1.1 before 6.1.1.1 iFix1; and IBM Care Management 6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 110604.

Affected (10)

Products: Ibm: Curam Social Program Management, Care Management

Ibm

2 products

Curam Social Program Management

Care Management

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Curam Social Program Management	From 6.0.4.0 to 6.0.4.6
Ibm Curam Social Program Management	From 6.0.5.0 to 6.0.5.9
Ibm Curam Social Program Management	Version 6.0.0
Ibm Curam Social Program Management	Version 6.0 sp1
Ibm Curam Social Program Management	Version 6.0 sp2
Ibm Curam Social Program Management	Version 6.1.0.0
Ibm Curam Social Program Management	Version 6.1.0.1
Ibm Curam Social Program Management	Version 6.1.1.0
Ibm Curam Social Program Management	Version 6.1.1.1