CVE-2014-8903

Опубликовано: 02 авг. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5iFix10 and 6.0.5 before 6.0.5.6 allows remote authenticated users to load arbitrary Java classes via unspecified vectors.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21700098
Vendor Advisory
http://www.securityfocus.com/bid/73947
Third Party Advisory
VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg21700098
Vendor Advisory
http://www.securityfocus.com/bid/73947
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:curam_social_program_management:6.0:sp2:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.4.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:curam_social_program_management:6.0.5.10:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.0085

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-77

Связанные уязвимости

GHSA-5cmw-62mj-h539