Cross site request forgery (csrf)

2017-08-3021:29:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.4%

JSON

IBM Emptoris Services Procurement 10.0.0.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 128107.

CPENameOperatorVersion
emptoris_services_procurementeq10.0.0.4
emptoris_services_procurementeq10.0.0.5
emptoris_services_procurementeq10.0.0.1
emptoris_services_procurementeq10.0.0.2
emptoris_services_procurementeq10.0.0.0
emptoris_services_procurementeq10.0.0.3
emptoris_services_procurementeq10.1.1.0

Name	Operator	Version
emptoris_services_procurement	eq	10.0.0.4
emptoris_services_procurement	eq	10.0.0.5
emptoris_services_procurement	eq	10.0.0.1
emptoris_services_procurement	eq	10.0.0.2
emptoris_services_procurement	eq	10.0.0.0
emptoris_services_procurement	eq	10.0.0.3
emptoris_services_procurement	eq	10.1.1.0