Vulnerability Bulletins

IBM Security Bulletin: A Vulnerabilitiy in IBM ACF(Active Content Filter) affects IBM Cúram(CVE-2015-1917)

   
Affected software IBM
 
IBM Cúram is shipped with IBM Active Content Filtering which is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victims Web browser CVE(s): CVE-2015-1917 Affected product(s) and affected version(s): IBM Cúram Social Program Management 5.2 SP6 IBM Cúram Social Program Management 6.0 SP2 IBM Cúram Social Program

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_a_vulnerabilitiy_in_ibm_acf_active_content_filter_affects_ibm_c%25C3%25BAram_cve_2015_1917?lang=en_us