CVE-2014-4843

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-06-08 · updated 2026-06-17
Weakness: CWE-358

Description

Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.5 iFix5 allows remote attackers to obtain sensitive information about internal caseworker usernames via vectors related to a URL.

Affected products

IBM Curam SPM: 6.0-sp2, 6.0.4.0, 6.0.4.1, 6.0.4.2, 6.0.4.3, 6.0.4.4 (+6)

References

http://www-01.ibm.com/support/docview.wss?uid=swg21698548
http://www.securityfocus.com/bid/73943
http://www-01.ibm.com/support/docview.wss?uid=swg21698548
http://www.securityfocus.com/bid/73943

Get alerted when CVE-2014-4843 or the next vulnerability affects your stack