NVD

Id
32709  
Name
CVE-2014-4804  
Description
Curam Universal Access in IBM Curam Social Program Management 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4.5 before iFix007, 6.0.5.4 before iFix005, and 6.0.5.5 before iFix003, when SPI inclusion is enabled, allows remote attackers to obtain sensitive user data by visiting an unspecified page.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-02-13  
Modified Date
2015-02-17  
Seq
2014-4804  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
172119 32709 CVE-2014-4804 http://www-01.ibm.com/support/docview.wss?uid=swg21695931  View
172120 32709 CVE-2014-4804 ibm-curam-cve20144804-info-disc(95306)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19031 JVNDB-2014-007906 IBM Curam Social Program Management の Curam Universal Access における重要なユーザデータを取得される脆弱性 IBM Curam Social Program Management の Curam Universal Access には、SPI インクルージョンが有効になっている場合、重要なユーザデータを取得される脆弱性が存在します。 CVE-2014-4804 72093 CVE-2014-4804 32709 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007906.html 2014-07-09 2015-02-19 View