Vulnerabilities > CVE-2020-4772 - XXE vulnerability in IBM Curam Social Program Management 7.0.10.0/7.0.9.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
NONE Availability impact
HIGH Summary
An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. A remote attacker could exploit this vulnerability to expose sensitive information, denial of service, server side request forgery or consume memory resources. IBM X-Force ID: 189150.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |