VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 18, 2014· Updated Jun 17, 2026

CVE-2014-3013

CVE-2014-3013

Description

Multiple cross-site scripting (XSS) vulnerabilities in IBM Curam Social Program Management 4.5 SP10 through 6.0.5.4 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to a (1) custom JSP or (2) custom renderer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

18
  • IBM/Curam Social Program Management18 versions
    cpe:2.3:a:ibm:curam_social_program_management:4.5:sp10:*:*:*:*:*:*+ 17 more
    • cpe:2.3:a:ibm:curam_social_program_management:4.5:sp10:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:5.2:sp1:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:5.2:sp4:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:6.0.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.4:*:*:*:*:*:*:*
    • (no CPE)range: 4.5 SP10 through 6.0.5.4

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.