Vulnerabilities > IBM > Emptoris Sourcing > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-01-07 CVE-2020-4896 Improper Input Validation vulnerability in IBM Emptoris Sourcing 10.1.0.0
IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers.
network
low complexity
ibm CWE-20
6.5
2019-08-20 CVE-2019-4485 Information Exposure Through an Error Message vulnerability in IBM products
IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could be used in further attacks against the system.
network
low complexity
ibm CWE-209
4.3
2019-08-20 CVE-2019-4484 Information Exposure Through an Error Message vulnerability in IBM products
IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could be used in further attacks against the system.
network
low complexity
ibm CWE-209
4.3
2019-08-20 CVE-2019-4308 Information Exposure Through an Error Message vulnerability in IBM products
IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 could allow an authenticated user to obtain sensitive information from error messages IBM X-Force ID: 161034.
network
low complexity
ibm CWE-209
4.3
2018-02-02 CVE-2016-0329 Open Redirect vulnerability in IBM Emptoris Sourcing
Open redirect vulnerability in IBM Emptoris Sourcing 10.0.0.x before 10.0.0.1_iFix3, 10.0.1.x before 10.0.1.3_iFix3, 10.0.2.x before 10.0.2.8_iFix1, 10.0.4.0 before 10.0.4.0_iFix8, and 10.1.0.0 before 10.1.0.0_iFix3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
network
low complexity
ibm CWE-601
5.4
2017-08-31 CVE-2017-1450 Open Redirect vulnerability in IBM Emptoris Sourcing
IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
network
low complexity
ibm CWE-601
6.1
2017-08-31 CVE-2017-1449 Open Redirect vulnerability in IBM Emptoris Sourcing
IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
network
low complexity
ibm CWE-601
5.4
2017-08-31 CVE-2017-1447 Cross-site Scripting vulnerability in IBM Emptoris Sourcing
IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2017-08-31 CVE-2017-1444 Cross-site Scripting vulnerability in IBM Emptoris Sourcing
IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2017-07-12 CVE-2016-8953 Open Redirect vulnerability in IBM Emptoris Sourcing
IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
network
low complexity
ibm CWE-601
5.4