Skip to content
OpenAdvisories
Medium · 5.4 CVE-2020-4774 EUVD-2020-26021GHSA-v5h8-2fmc-7wp6

An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied in…

Published Oct 12, 2020 · Updated Sep 16, 2024 · Assigned by ibm

Description

An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By sending a specially-crafted input, a remote attacker could exploit this vulnerability to obtain unauthorized access or reveal sensitive information such as XML document structure and content. IBM X-Force ID: 189152.

Affected products

VendorProductAffectedFixed
IBM Curam SPM 7.0.9, 7.0.10 —

References