PT-2016-3758 · Ibm · Ibm Curam Social Program Management
Published
2016-01-02
·
Updated
2016-01-06
·
CVE-2015-7402
CVSS v2.0
3.5
Low
| Vector | AV:N/AC:M/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Curam Social Program Management versions 6.1 through 6.1.1.0
Description
A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This could potentially lead to unauthorized actions on the web application.
Recommendations
For IBM Curam Social Program Management versions 6.1 through 6.1.1.0, update to version 6.1.1.1 or later to resolve the issue.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Curam Social Program Management