PT-2016-3758 · Ibm · Ibm Curam Social Program Management
CVE-2015-7402
·
Published
2016-01-02
·
Updated
2016-01-06
CVSS v2.0
3.5
Low
| Vector | AV:N/AC:M/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Curam Social Program Management versions 6.1 through 6.1.1.0
Description
A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This could potentially lead to unauthorized actions on the web application.
Recommendations
For IBM Curam Social Program Management versions 6.1 through 6.1.1.0, update to version 6.1.1.1 or later to resolve the issue.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Curam Social Program Management