CVE-2018-2001
published 2019-05-07CVE-2018-2001: IBM Cram Social Program Management 6.1.1, 6.2.0, 7.0.4, and 7.0.5 is vulnerable to cross-site request forgery which could allow an attacker to execute…
high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
IBM Cram Social Program Management 6.1.1, 6.2.0, 7.0.4, and 7.0.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 154891.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | cram_social_program_management | — | — |
| ibm | cram_social_program_management | — | — |
| ibm | cram_social_program_management | — | — |
| ibm | cram_social_program_management | — | — |
| ibm | curam_social_program_management | — | — |
| ibm | curam_social_program_management | 6.1.0.0 – 6.1.1.6 | — |
| ibm | curam_social_program_management | 6.2.0.0 – 6.2.0.6 | — |
| ibm | curam_social_program_management | 7.0.0.0 – 7.0.4.0 | — |