CVE-2020-4775

published 2020-10-12

CVE-2020-4775: A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows attackers to inject…

medium 5.4 CVSS 3.1

AV N AC L PR L UI R S C C L I L A N

A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows attackers to inject malicious scripts into web applications for the purpose of running unwanted actions on the end user's device, restricted to a single location. IBM X-Force ID: 189153.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	curam_social_program_management	—	—
ibm	curam_social_program_management	—	—
ibm	curam_spm	—	—
ibm	curam_spm	—	—

CWE-79