medium5.4
CVE-2016-0261
Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0.0 before SP2 EP29, 6.0.4 before 6.0.4.6 iFix3, 6.0.5 before 6.0.5.9 iFix2, …
Impact
Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0.0 before SP2 EP29, 6.0.4 before 6.0.4.6 iFix3, 6.0.5 before 6.0.5.9 iFix2, 6.1.0 before 6.1.0.1 iFix1, and 6.1.1 before 6.1.1.1 iFix1; and IBM Care Management 6.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 110604.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Curam Social Program Management | from 6.0.4.0 through 6.0.4.6 from 6.0.5.0 through 6.0.5.9 Versions 6.0, 6.0.0, 6.1.0.0, 6.1.0.1 |
| Ibm | Care Management | Version 6.0 |