CVE-2018-2001

Published: May 7, 2019Modified: Nov 21, 2024

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

IBM Cram Social Program Management 6.1.1, 6.2.0, 7.0.4, and 7.0.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 154891.

Affected (4)

Products: Ibm: Curam Social Program Management

Ibm

1 product

Curam Social Program Management

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Curam Social Program Management	From 6.1.0.0 to 6.1.1.6
Ibm Curam Social Program Management	From 6.2.0.0 to 6.2.0.6
Ibm Curam Social Program Management	From 7.0.0.0 to 7.0.4.0
Ibm Curam Social Program Management	Version 7.0.5.0