Description
An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. A remote attacker could exploit this vulnerability to expose sensitive information, denial of service, server side request forgery or consume memory resources. IBM X-Force ID: 189150.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Curam SPM | 7.0.9, 7.0.10 | — |