Lucene search
HistoryAug 12, 2014 - 12:55 a.m.
CVE-2014-3069
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
6.6
Confidence
Low
EPSS
0.001
Percentile
40.3%
Multiple CRLF injection vulnerabilities in the Universal Access component in IBM Curam Social Program Management (SPM) 6.0.5.5, when WebSphere Application Server is not used, allow remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified parameters.
Affected configurations
Node
ibmcuram_social_program_managementMatch6.0.5.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | curam_social_program_management | 6.0.5.5 | cpe:2.3:a:ibm:curam_social_program_management:6.0.5.5:*:*:*:*:*:*:* |
Related
prion
prion
Crlf injection
2014-08-12 00:55:00
cvelist
cvelist
CVE-2014-3069
2014-08-12 00:00:00
ibm
ibm
cve
cve
CVE-2014-3069
2014-08-12 00:55:03
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
6.6
Confidence
Low
EPSS
0.001
Percentile
40.3%
Related for NVD:CVE-2014-3069