CVE-2014-4843

MEDIUM · CVSS 5.3 EPSS 1.25%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-06-08 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2014-4843

Severity

MEDIUM

CVSS

5.3

EPSS

1.25%

Original Filing — NVD Description

Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.5 iFix5 allows remote attackers to obtain sensitive information about internal caseworker usernames via vectors related to a URL.