3.5

CVE-2014-3012

Multiple CRLF injection vulnerabilities in IBM Curam Social Program Management 5.2 SP1 through 6.0.5.4 allow remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified parameters to custom JSPs.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Curam Social Program Management Version 5.2 Update sp1
Ibm ≫ Curam Social Program Management Version 5.2 Update sp4
Ibm ≫ Curam Social Program Management Version 6.0.3.0
Ibm ≫ Curam Social Program Management Version 6.0.4.0
Ibm ≫ Curam Social Program Management Version 6.0.4.1
Ibm ≫ Curam Social Program Management Version 6.0.4.2
Ibm ≫ Curam Social Program Management Version 6.0.4.3
Ibm ≫ Curam Social Program Management Version 6.0.4.4
Ibm ≫ Curam Social Program Management Version 6.0.4.5
Ibm ≫ Curam Social Program Management Version 6.0.5.0
Ibm ≫ Curam Social Program Management Version 6.0.5.1
Ibm ≫ Curam Social Program Management Version 6.0.5.2
Ibm ≫ Curam Social Program Management Version 6.0.5.3
Ibm ≫ Curam Social Program Management Version 6.0.5.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.95% 0.566
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 3.5 6.8 2.9
AV:N/AC:M/Au:S/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/59257
http://www-01.ibm.com/support/docview.wss?uid=swg21675454
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/93010