CVE-2014-6090 in Curam Social Program Management
Tóm tắt
Bởi VulDB • 20/07/2026
Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Curam Social Program Management (SPM) versions 5.2 SP6 before EP6, 6.0 SP2 before EP26, 6.0.3 before 6.0.3.0 iFix8, 6.0.4 before 6.0.4.5 iFix10, and 6.0.5 before 6.0.5.6 affect the (1) DataMappingEditorCommands, (2) DatastoreEditorCommands, and (3) IEGEditorCommands servlets. These vulnerabilities allow remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.