CVE-2014-6192

published 2015-05-25

CVE-2014-6192: Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 before 6.0.5.6, and…

low 3.5 CVSS 3.1

AV N AC M Au S C N I P A N

Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 before 6.0.5.6, and 6.0.5.5a before 6.0.5.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected

16 ranges

Vendor	Product	Version range	Fixed in
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—

CWE-79