CVE-2014-4804

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-02-14 · updated 2026-06-17
Weakness: CWE-200

Description

Curam Universal Access in IBM Curam Social Program Management 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4.5 before iFix007, 6.0.5.4 before iFix005, and 6.0.5.5 before iFix003, when SPI inclusion is enabled, allows remote attackers to obtain sensitive user data by visiting an unspecified page.

Affected products

IBM Curam SPM: through 5.2; 6.0-sp2, 6.0.4.5, 6.0.5.4, 6.0.5.5

References

http://www-01.ibm.com/support/docview.wss?uid=swg21695931
https://exchange.xforce.ibmcloud.com/vulnerabilities/95306
http://www-01.ibm.com/support/docview.wss?uid=swg21695931
https://exchange.xforce.ibmcloud.com/vulnerabilities/95306

Get alerted when CVE-2014-4804 or the next vulnerability affects your stack