CVE-2014-6192

IBM Curam Social Program Management <6.0.4.5 iFix10-6.0.5.8 - XSS

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 before 6.0.5.6, and 6.0.5.5a before 6.0.5.8 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21700252

Scores

EPSS 0.0078
EPSS Percentile 52.2%

Details

CWE
CWE-79
Status published
Products (16)
ibm/curam_social_program_management 6.0 sp2
ibm/curam_social_program_management 6.0.4.0
ibm/curam_social_program_management 6.0.4.1
ibm/curam_social_program_management 6.0.4.2
ibm/curam_social_program_management 6.0.4.3
ibm/curam_social_program_management 6.0.4.4
ibm/curam_social_program_management 6.0.4.5
ibm/curam_social_program_management 6.0.5.0
ibm/curam_social_program_management 6.0.5.1
ibm/curam_social_program_management 6.0.5.2
... and 6 more
Published May 25, 2015
Tracked Since Feb 18, 2026