Vulnerabilities > IBM > Curam Social Program Management > 6.0.5

DATE CVE VULNERABILITY TITLE RISK
2017-04-20 CVE-2016-8923 Information Exposure vulnerability in IBM Curam Social Program Management
IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to obtain sensitive information from the profile of a higher privileged user that they should not have access to.
network
low complexity
ibm CWE-200
4.3
4.3
2017-03-31 CVE-2016-6111 XXE vulnerability in IBM Curam Social Program Management
IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data.
network
low complexity
ibm CWE-611
critical
 9.1
9.1
2016-01-03 CVE-2015-5023 SQL Injection vulnerability in IBM Curam Social Program Management
SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
network
low complexity
ibm CWE-89
5.4
5.4