cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2018-2001,https://securityvulnerability.io/vulnerability/CVE-2018-2001,,"IBM Cram Social Program Management 6.1.1, 6.2.0, 7.0.4, and 7.0.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 154891.",IBM,Cram Social Program Management,4.3,MEDIUM,0.000859999970998615,false,,false,false,false,,,false,false,,2019-05-03T00:00:00.000Z,0
CVE-2018-1362,https://securityvulnerability.io/vulnerability/CVE-2018-1362,,"IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380.",IBM,Cram Social Program Management,5,MEDIUM,0.0007099999929778278,false,,false,false,false,,,false,false,,2018-01-19T14:29:00.000Z,0
CVE-2017-1739,https://securityvulnerability.io/vulnerability/CVE-2017-1739,,"IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134921.",IBM,Cram Social Program Management,5.4,MEDIUM,0.0006099999882280827,false,,false,false,false,,,false,false,,2018-01-11T17:29:00.000Z,0
CVE-2017-1740,https://securityvulnerability.io/vulnerability/CVE-2017-1740,,"IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134922.",IBM,Cram Social Program Management,5.4,MEDIUM,0.0006099999882280827,false,,false,false,false,,,false,false,,2018-01-11T17:29:00.000Z,0
CVE-2017-1195,https://securityvulnerability.io/vulnerability/CVE-2017-1195,,"IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 123670.",IBM,Cram Social Program Management,6.1,MEDIUM,0.0009699999936856329,false,,false,false,false,,,false,false,,2017-08-29T21:29:00.000Z,0
CVE-2016-9732,https://securityvulnerability.io/vulnerability/CVE-2016-9732,,"IBM Curam Social Program Management 6.0, 6.1, 6.2 and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119761.",IBM,Cram Social Program Management,5.4,MEDIUM,0.0004900000058114529,false,,false,false,false,,,false,false,,2017-08-29T01:35:00.000Z,0
CVE-2017-1110,https://securityvulnerability.io/vulnerability/CVE-2017-1110,,"IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to view the incidents of a higher privileged user. IBM X-Force ID: 120915.",IBM,Cram Social Program Management,6.5,MEDIUM,0.0005600000149570405,false,,false,false,false,,,false,false,,2017-08-29T01:35:00.000Z,0
CVE-2017-1106,https://securityvulnerability.io/vulnerability/CVE-2017-1106,,"IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120744.",IBM,Cram Social Program Management,5.4,MEDIUM,0.0006099999882280827,false,,false,false,false,,,false,false,,2017-06-28T18:29:00.000Z,0
CVE-2016-6111,https://securityvulnerability.io/vulnerability/CVE-2016-6111,,"IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000833.",IBM,Cram Social Program Management,9.1,CRITICAL,0.0015399999683722854,false,,false,false,false,,,false,false,,2017-03-31T18:00:00.000Z,0