Cross site scripting

2021-01-0718:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.6%

JSON

IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190986.

CPENameOperatorVersion
emptoris_strategic_supply_managementge10.1.0.0
emptoris_strategic_supply_managementlt10.1.0.38
emptoris_strategic_supply_managementge10.1.1.0
emptoris_strategic_supply_managementlt10.1.1.35
emptoris_strategic_supply_managementge10.1.3.0
emptoris_strategic_supply_managementlt10.1.3.30

Name	Operator	Version
emptoris_strategic_supply_management	ge	10.1.0.0
emptoris_strategic_supply_management	lt	10.1.0.38
emptoris_strategic_supply_management	ge	10.1.1.0
emptoris_strategic_supply_management	lt	10.1.1.35
emptoris_strategic_supply_management	ge	10.1.3.0
emptoris_strategic_supply_management	lt	10.1.3.30