CVE-2020-4775: IBM Curam Social Program Management

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows attackers to inject malicious scripts into web applications for the purpose of running unwanted actions on the end user's device, restricted to a single location. IBM X-Force ID: 189153.

Affected products

• IBM Curam Social Program Management: version 7.0.9.0 only; version 7.0.10.0 only

Published 2020-10-12. Last modified 2026-06-17.