CVE-2014-0864: Multiple cross-site request forgery (CSRF) vulnerabilities in Executer in RICOS in IBM Algo Credit Limits (...

Security readout for executives and security teams

This issue affects IBM Algorithmics Algo Credit Limits using RICOS Executer. A malicious site could cause a logged-in user’s browser to submit unauthorized changes, including deal currency or limit changes. That matters because it targets financial control data, but the sources do not provide CVSS or active exploitation evidence. Exposure is likely limited to organizations still running IBM Algorithmics ACLM versions 4.5.0 through 4.7.0 before 4.7.0.03 FP5. Internet exposure is not stated in the sources; internal financial systems may still be reachable by authenticated users. Prioritize verification if the organization still uses IBM Algorithmics ACLM. The affected versions are old, but the business impact could be serious because unauthorized changes may affect credit limits or deal data. No active exploitation evidence is provided. Mitigation focus: Confirm whether IBM ACLM/RICOS is present and in scope.; Upgrade to IBM ACLM 4.7.0.03 FP5 or later per vendor guidance.; Restrict access to ACLM interfaces to trusted networks and users..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.