CVE-2014-8903

IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5iFix10 and 6.0.5 before 6.0.5.6 allows remote authenticated users to load arbitrary Java classes via unspecified vectors.

• CWE-77

• http://www-01.ibm.com/support/docview.wss?uid=swg21700098Vendor Advisory
• http://www.securityfocus.com/bid/73947Third Party Advisory, VDB Entry
• http://www-01.ibm.com/support/docview.wss?uid=swg21700098Vendor Advisory
• http://www.securityfocus.com/bid/73947Third Party Advisory, VDB Entry

Published

Aug 2, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-8897Cross-site scripting (XSS) vulnerability in the Collaboratio…
• CVE-2014-8898Cross-site scripting (XSS) vulnerability in the Collaboratio…
• CVE-2014-8899Cross-site scripting (XSS) vulnerability in the Collaboratio…
• CVE-2014-8900Cross-site request forgery (CSRF) vulnerability in IBM Urban…
• CVE-2014-8901IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5,…
• CVE-2014-8902Cross-site scripting (XSS) vulnerability in the Blog Portlet…
• CVE-2014-8904lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2…
• CVE-2014-8909Cross-site scripting (XSS) vulnerability in IBM WebSphere Po…
• CVE-2014-8910IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, …
• CVE-2014-8911Cross-site scripting (XSS) vulnerability in IBM Content Navi…
• CVE-2014-8912IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 throu…
• CVE-2014-8913Cross-site scripting (XSS) vulnerability in the Process Port…