CVE-2014-4790

🗓️ 26 Aug 2014 10:55:04Reported by [email protected]Type

IBM Emptoris Sourcing Portfolio and Spend Analysis versions prior to 10.0.2.4 allow frame injection, leading to phishing attacks and unauthorized access or data exposure

Reporter	Title	Published	Views	Family All 6
IBM Security Bulletins	Security Bulletins for Emptoris Spend Analysis	8 Dec 201815:10	–	ibm
IBM Security Bulletins	Security Bulletins for Emptoris Sourcing	8 Dec 201815:10	–	ibm
CVE	CVE-2014-4790	26 Aug 201410:00	–	cve
Cvelist	CVE-2014-4790	26 Aug 201410:00	–	cvelist
EUVD	EUVD-2014-4709	7 Oct 202500:30	–	euvd
Prion	Design/Logic Flaw	26 Aug 201410:55	–	prion

NVD

Node

ibm emptoris_spend_analysisMatch9.5.0.0

ibm emptoris_spend_analysisMatch9.5.0.1

ibm emptoris_spend_analysisMatch9.5.0.2

ibm emptoris_spend_analysisMatch9.5.0.3

ibm emptoris_spend_analysisMatch10.0.1.0

ibm emptoris_spend_analysisMatch10.0.1.1

ibm emptoris_spend_analysisMatch10.0.1.2

ibm emptoris_spend_analysisMatch10.0.2.0

ibm emptoris_spend_analysisMatch10.0.2.2

Node

ibm emptoris_sourcing_portfolioMatch9.5.0.0

ibm emptoris_sourcing_portfolioMatch9.5.0.1

ibm emptoris_sourcing_portfolioMatch9.5.0.2

ibm emptoris_sourcing_portfolioMatch9.5.1.0

ibm emptoris_sourcing_portfolioMatch9.5.1.1

ibm emptoris_sourcing_portfolioMatch9.5.1.2

ibm emptoris_sourcing_portfolioMatch10.0.0.0

ibm emptoris_sourcing_portfolioMatch10.0.1.0

ibm emptoris_sourcing_portfolioMatch10.0.1.1

ibm emptoris_sourcing_portfolioMatch10.0.1.2

ibm emptoris_sourcing_portfolioMatch10.0.2.0

ibm emptoris_sourcing_portfolioMatch10.0.2.2

ibm emptoris_sourcing_portfolioMatch10.0.2.3

Source	Link
www-01	www.www-01.ibm.com/support/docview.wss
www-01	www.www-01.ibm.com/support/docview.wss
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/93195
secunia	www.secunia.com/advisories/60481
secunia	www.secunia.com/advisories/60480

17 Jun 2026 00:10Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.9

EPSS0.00803

CWE-264