CVE-2020-4775

CVSS 5.4 MEDIUMEPSS 0.6%

A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows attackers to inject malicious scripts into web applications for the purpose of running unwanted actions on the end user's device, restricted to a single location. IBM X-Force ID: 189153.

CVSS:3.0/UI:R/S:C/C:L/I:L/AC:L/AV:N/A:N/PR:L/E:H/RL:O/RC:C

Affected products

IBM · Curam SPM

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/189153 https://www.ibm.com/support/pages/node/6346571