CVE-2014-8903: IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5iFix10 and 6.0.5 before 6.0.5....

Security readout for executives and security teams

This vulnerability affects older IBM Curam Social Program Management releases. An authenticated remote user could load arbitrary Java classes through unspecified vectors. The sources name fixed release levels, but do not describe impact beyond class loading, exploitation in the wild, or detailed prerequisites. Exposure is likely limited to organizations running the named IBM Curam SPM versions, especially where authenticated users can reach the application. The bundle does not identify affected CPEs or broader product families. Prioritize remediation if IBM Curam SPM is still in use, because this is an authenticated remote class-loading flaw in a system often tied to sensitive program data. Urgency is lower if the product is absent or already above the named fixed versions. Mitigation focus: Upgrade affected 6.0 SP2 systems to EP26 or later.; Upgrade 6.0.4 systems to 6.0.4.5 iFix10 or later.; Upgrade 6.0.5 systems to 6.0.5.6 or later..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.