Vulnerability Bulletins

IBM Security Bulletin: IBM Cúram is vulnerable to cross site scripting attack (CVE-2014-3096)

   
Affected software IBM
 
IBM Cúram Social Program Management is vulnerable to cross-site scripting, caused by improper validation of user supplied input. CVE(s): CVE-2014-3096 Affected product(s) and affected version(s): Cúram Social Program Management All 6.0.5 code releases prior to 6.0.5.6 are affected with the exception of 6.0.5.5a. Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin:

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_c%25C3%25BAram_is_vulnerable_to_cross_site_scripting_attack_cve_2014_3096?lang=en_us