ibm curam-social-program-management CVE-2016-9979 is a vulnerability in IBM Curam Social Program Management
Published on April 20, 2017

IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120255.

NVD


Products Associated with CVE-2016-9979

Want to know whenever a new CVE is published for IBM Curam Social Program Management? stack.watch will email you.

IBM Curam Social Program Management
 

Affected Versions

IBM Curam Social Program Management Version 6.0.4, 6.0.5, 6.0, 5.2, 4.5, 6.0.3, 6.1, 5.2.6, 6.0.1, 6.1.0, 6.1.1, 6.2.0, 7.0.0 is affected by CVE-2016-9979

Exploit Probability

EPSS
0.26%
Percentile
48.90%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.