CVE-2018-1671

IBM Curam Social Program Management 7.0.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-force ID: 144951.

• CWE-79

• http://www.securityfocus.com/bid/106202Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/144951VDB Entry, Vendor Advisory
• https://www.ibm.com/support/docview.wss?uid=ibm10739019Patch, Vendor Advisory
• http://www.securityfocus.com/bid/106202Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/144951VDB Entry, Vendor Advisory
• https://www.ibm.com/support/docview.wss?uid=ibm10739019Patch, Vendor Advisory

Published

Dec 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1670IBM Financial Transaction Manager for ACH Services for Multi…3.1
• CVE-2018-16703A vulnerability in the Gleez CMS 1.2.0 login page could allo…
• CVE-2018-16704An issue was discovered in Gleez CMS v1.2.0. Because of an I…
• CVE-2018-16705FURUNO FELCOM 250 and 500 devices allow unauthenticated acce…
• CVE-2018-16706LG SuperSign CMS allows TVs to be rebooted remotely without …
• CVE-2018-16709Fuji Xerox DocuCentre-V 3065, ApeosPort-VI C3371, ApeosPort-…
• CVE-2018-16710OctoPrint through 1.3.9 allows remote attackers to obtain se…
• CVE-2018-16711IObit Advanced SystemCare, which includes Monitor_win10_x64.…
• CVE-2018-16712IObit Advanced SystemCare, which includes Monitor_win10_x64.…
• CVE-2018-16713IObit Advanced SystemCare, which includes Monitor_win10_x64.…
• CVE-2018-16715An issue was discovered in Absolute Software CTES Windows Ag…
• CVE-2018-16716A path traversal vulnerability exists in viewcgi.c in the 2.…