CVE-2014-3012

CVE-2014-3012 describes multiple CRLF injection vulnerabilities in IBM Curam Social Program Management versions 5.2 SP1 through 6.0.5.4. These flaws allow remote authenticated users to inject arbitrary HTTP headers and perform HTTP response splitting attacks through unspecified parameters in custom JSPs. The vulnerability has a CVSS score of 3.5, indicating a medium attack complexity, requiring authentication, and resulting in partial integrity impact with no confidentiality or availability impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.