Cross-Site Scripting Vulnerability in IBM Curam Social Program Management
CVE-2021-39068

5.4MEDIUM

Key Information:

Vendor
IBM
Status
Curam Social Program Management
Vendor
CVE Published:
11 April 2022

Summary

IBM Curam Social Program Management versions 8.0.1 and 7.0.11 contain a cross-site scripting vulnerability that permits attackers to inject arbitrary JavaScript code into the web interface. This may lead to the manipulation of user sessions, potentially exposing sensitive information such as credentials within trusted environments. Users and organizations relying on these versions should act promptly to mitigate this vulnerability to safeguard against potential exploitation.

Affected Version(s)

Curam Social Program Management 7.0.11

Curam Social Program Management 8.0.1

References

https://www.ibm.com/support/pages/node/6570589
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/215306
vdb-entryx_refsource_XF

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.