CVE-2014-3013: Multiple cross-site scripting (XSS) vulnerabilities in IBM Curam Social Program Management 4.5 SP10 through...

Security readout for executives and security teams

CVE-2014-3013 is an authenticated cross-site scripting issue in IBM Curam Social Program Management versions 4.5 SP10 through 6.0.5.4. A logged-in user could inject script or HTML through custom JSP or custom renderer input, potentially affecting other users who view the manipulated content. Exposure is most likely in legacy IBM Curam Social Program Management deployments within the named version range, especially environments with custom JSPs or custom renderers reachable by authenticated users. Prioritize based on whether legacy Curam systems are still in use and exposed to broad authenticated populations. Without CVSS or KEV evidence, urgency is uncertain, but unremediated XSS can still create account and data-risk in business workflows. Mitigation focus: Check IBM advisory guidance for fixed versions or supported mitigations.; Inventory Curam deployments and confirm whether versions fall within 4.5 SP10 through 6.0.5.4.; Review custom JSP and renderer paths for proper output encoding and input validation..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.