CVE-2014-8903: IBM Curam Social Program Management

High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days.

IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5iFix10 and 6.0.5 before 6.0.5.6 allows remote authenticated users to load arbitrary Java classes via unspecified vectors.

Affected products

• IBM Curam Social Program Management: version 6.0 only; version 6.0.4.0 only; version 6.0.4.1 only; version 6.0.4.2 only; version 6.0.4.3 only; version 6.0.4.4 only; …

Published 2017-08-02. Last modified 2026-06-17.