XPath Vulnerability in IBM Curam Social Program Management

CVE-2020-4774

What is CVE-2020-4774?

An XPath vulnerability exists within IBM Curam Social Program Management versions 7.0.9 and 7.0.10, stemming from inadequate input validation. This flaw could be exploited by a remote attacker through the submission of specially-crafted input. Successful exploitation may lead to unauthorized access or exposure of sensitive information, including the structure and content of XML documents. Organizations utilizing affected versions should ensure thorough security measures are in place.

References