Ibm Curam Social Program Management Luki w zabezpieczeniach

Oś czasu

Wersja

7.0.9	10
6.0	10
7.0.10	9
7.0	9
6.1.1	7

Przeciwdziałanie

Official Fix	22
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	23

Wykorzystywanie

High	3
Functional	0
Proof-of-Concept	0
Unproven	1
Not Defined	41

Wektor dostępu

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	45

Uwierzytelnianie

Not Defined	0
High	0
Low	30
None	15

Interakcja z użytkownikiem

Not Defined	0
Required	23
None	22

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	6
≤5	20
≤6	11
≤7	4
≤8	4
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	6
≤5	20
≤6	12
≤7	3
≤8	4
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	19
≤5	12
≤6	5
≤7	7
≤8	2
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	4
≤6	15
≤7	6
≤8	2
≤9	3
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	3
≤7	0
≤8	0
≤9	1
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	0
<5k	11
<10k	14
<25k	19
<50k	1
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	19
<2k	4
<5k	14
<10k	8
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (39): 4.0, 4.1, 4.2, 4.3, 4.4, 4.5, 5.0, 5.1, 5.2, 6.0, 6.0 SP2, 6.0 SP2 EP25, 6.0.4, 6.0.4 iFix9, 6.0.4.1, 6.0.4.2, 6.0.4.3, 6.0.4.4, 6.0.4.5, 6.0.5, 6.0.5.1, 6.0.5.2, 6.0.5.3, 6.0.5.4, 6.0.5.5, 6.0.5.5 iFix4, 6.0.5.6, 6.0.5.7, 6.1, 6.1.1, 6.2, 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.9, 7.0.11, 8, 8.0.1

Link to Product Website: https://www.ibm.com/

Typ oprogramowania: Business Process Management Software

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2023-01-27	7.8	7.7	IBM Curam Social Program Management HTTP Verb weak authentication	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2020-4779
2022-06-20	6.1	6.0	IBM Curam Social Program Management weak authentication	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2022-22318
2022-06-20	6.6	6.5	IBM Curam Social Program Management weak authentication	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2022-22317
2022-04-12	4.4	4.4	IBM Curam Social Program Management Web UI cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-39068
2021-01-05	4.3	4.3	IBM Curam Social Program Management cross site request forgery	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2020-4942
2020-10-12	5.4	5.1	IBM Curam Social Program Management readLine denial of service	$0-$5k	$0-$5k	Not Defined	Official Fix	0.06	CVE-2020-4781
2020-10-12	4.2	4.2	IBM Curam Social Program Management OOTB Build Script information disclosure	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.05	CVE-2020-4780
2020-10-12	5.6	5.6	IBM Curam Social Program Management weak encryption	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2020-4778
2020-10-12	6.4	6.4	IBM Curam Social Program Management directory traversal	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.01	CVE-2020-4776
2020-10-12	4.4	4.4	IBM Curam Social Program Management cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.01	CVE-2020-4775