NetSight
IP …
medium5.4

CVE-2018-1900

IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 is vulnerable to cross-site scripting.

Impact

IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152529.

Affected products

VendorProductAffected versions
IbmCuram Social Program Management
from 6.0.5.0 through 6.0.5.10
from 6.1.0.0 through 6.1.1.6
from 6.2.0.0 through 6.2.0.6
from 7.0.0.0 through 7.0.1.0
from 7.0.2.0 through 7.0.4.0

Weakness classification

CWE-79

References