CVE-2018-1900

Published: Dec 11, 2018Modified: Nov 21, 2024

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152529.

Affected (5)

Products: Ibm: Curam Social Program Management

Ibm

1 product

Curam Social Program Management

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Curam Social Program Management	From 6.0.5.0 to 6.0.5.10
Ibm Curam Social Program Management	From 6.1.0.0 to 6.1.1.6
Ibm Curam Social Program Management	From 6.2.0.0 to 6.2.0.6
Ibm Curam Social Program Management	From 7.0.0.0 to 7.0.1.0
Ibm Curam Social Program Management	From 7.0.2.0 to 7.0.4.0