CVE-2018-1362

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 within Citizen Portal could allow an authenticated user to withdraw other user's submitted applications from the system and possibly obtain privileges. IBM X-Force ID: 137380.

Metrics

CVSS 3.0 5.0/10CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected software

No affected versions have been published.

Timeline

Published
Jan 19, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-136207.5The mintToken function of a smart contract implementation for TripCash, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-136217.5The mintToken function of a smart contract implementation for SoundTribeToken, an Ethereum token, has an integer overflow that allows the owCVE-2018-136227.5The mintToken function of a smart contract implementation for ObjectToken (OBJ), an Ethereum token, has an integer overflow that allows the CVE-2018-136237.5The mintToken function of a smart contract implementation for AirdropperCryptics, an Ethereum token, has an integer overflow that allows theCVE-2018-136247.5The mintToken function of a smart contract implementation for WXSLToken, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-136257.5The mintlvlToken function of a smart contract implementation for Krown, an Ethereum token, has an integer overflow that allows the owner of CVE-2018-136267.5The mintToken function of a smart contract implementation for SemainToken, an Ethereum token, has an integer overflow that allows the owner CVE-2018-136277.5The mintToken function of a smart contract implementation for MyOffer, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-136287.5The mintToken function of a smart contract implementation for MomentumToken, an Ethereum token, has an integer overflow that allows the owneCVE-2018-136297.5The mintToken function of a smart contract implementation for CrimsonShilling, an Ethereum token, has an integer overflow that allows the owCVE-2018-13635.4IBM Jazz Reporting Service (JRS) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows usCVE-2018-136307.5The mintToken function of a smart contract implementation for DoccoinPreICO, an Ethereum token, has an integer overflow that allows the owne
CVE-2018-1362: Medium severity, CVSS 5.0 | Vulnix