Emptoris Strategic Supply Management (Ibm) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 73 known versions, newest CVE from 2021-01-07. Vendor: Ibm.
CVEs of Emptoris Strategic Supply Management
- CVE-2020-4898 - CVSS 7.5 (high), 2021-01-07: IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…
- CVE-2020-4895 - CVSS 6.4 (medium), 2021-01-07: IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed…
- CVE-2020-4893 - CVSS 5.9 (medium), 2021-01-07: IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters. This may lead to…
- CVE-2019-4752 - CVSS 8.8 (high), 2020-02-20: IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is vulnerable to SQL injection. A remote…
- CVE-2017-1097 - CVSS 8.8 (high), 2017-09-05: IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site request forgery which could allow an attacker to…
- CVE-2016-6029 - CVSS 5.9 (medium), 2017-08-14: IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 could allow a remote attacker to obtain sensitive information, caused by the failure to…
- CVE-2016-6021 - CVSS 5.4 (medium), 2017-08-14: IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
- CVE-2017-1190 - CVSS 6.4 (medium), 2017-08-14: IBM Emptoris Strategic Supply Management Platform 10.x and 10.1 could allow a local user with special access roles to execute arbitrary code on the system. By…
- CVE-2017-1448 - CVSS 5.4 (medium), 2017-08-09: IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By…
- CVE-2016-8949 - CVSS 5.4 (medium), 2017-08-09: IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By…
- CVE-2016-6121 - CVSS 5.4 (medium), 2017-08-09: IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
- CVE-2016-6118 - CVSS 5.4 (medium), 2017-07-24: IBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…
- CVE-2016-8951 - CVSS 7.5 (high), 2017-07-13: IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to a denial of service attack. An attacker can exploit a…
- CVE-2016-6019 - CVSS 5.4 (medium), 2017-07-13: IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed…
- CVE-2016-8952 - CVSS 5.4 (medium), 2017-07-13: IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed…
- CVE-2015-4939 - CVSS 4.3 (medium), 2015-10-06: Cross-site scripting (XSS) vulnerability in IBM Emptoris Supplier Lifecycle Management and Emptoris Program Management 10.x before 10.0.1.4_iFix3, 10.0.2.x…
