CVE-2017-1321

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

CVE-2016-8948

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

CVE-2017-1321

IBM InfoSphere Information Server (Framework) and InfoSphere Information Server on Cloud are affected by CVE-2017-1321 (XSS). The vulnerability arises from improper validation of user-supplied input, allowing remote attackers to embed arbitrary JavaScript in the Web UI, potentially leading to cre...

CVE-2016-8950

CVE-2016-8950 affects IBM Emptoris Sourcing 9.5.x–10.1.x and is a cross-site scripting vulnerability in the Web UI that can allow embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The IBM security bulletin confirms this vulnerability and provi...

CVE-2016-8950

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

CVE-2016-6114

Summary: IBM Emptoris Sourcing versions 9.5.x–10.1.x are vulnerable to cross-site scripting via the Web UI, potentially leading to credentials disclosure within a trusted session. The issue is documented under CVE-2016-6114 (IBM X-Force 118352). What is affected: IBM Emptoris Sourcing 9.5.x throu...

CVE-2017-1321

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

CVE-2016-8946

CVE-2016-8946 affects IBM Emptoris Sourcing 9.5.x through 10.1.x. The issue is a cross-site scripting vulnerability in the Web UI that lets an attacker embed arbitrary JavaScript, potentially altering functionality and leading to credentials disclosure within a trusted session. The IBM bulletin c...

CVE-2016-8946

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

CVE-2016-8948

CVE-2016-8948 affects IBM Emptoris Sourcing 9.5.x through 10.1.x and is a cross-site scripting vulnerability in the Web UI. The underlying issue allows an attacker to embed arbitrary JavaScript, potentially altering functionality and leading to credentials disclosure within a trusted session (imp...

CVE-2016-8950: Improper Neutralization of Input During Web Page Generation

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

PT-2017-9892

Name of the Vulnerable Software and Affected Versions IBM Emptoris Sourcing versions 9.5.x through 10.1.x Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

PT-2017-9894

Name of the Vulnerable Software and Affected Versions IBM Emptoris Sourcing versions 9.5.x through 10.1.x Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

CVE-2017-1321: Improper Neutralization of Input During Web Page Generation

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

CVE-2016-8946: Improper Neutralization of Input During Web Page Generation

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

CVE-2016-8948: Improper Neutralization of Input During Web Page Generation

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

PT-2017-12961

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

PT-2017-9890

Name of the Vulnerable Software and Affected Versions IBM Emptoris Sourcing versions 9.5.x through 10.1.x Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

PT-2017-8905

Name of the Vulnerable Software and Affected Versions IBM Emptoris Sourcing versions 9.5.x through 10.1.x Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

CVE-2016-6114: Improper Neutralization of Input During Web Page Generation

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11835...