708 matches found
CVE-2016-0329
IBM Emptoris Sourcing (versions 10.0.0.0 through 10.1.0.0) contains an Open Redirect vulnerability (CVE-2016-0329). A remote attacker could use specially crafted URLs to redirect victims to arbitrary sites, enabling phishing. Exposures are described in IBM Security Bulletins for Emptoris Sourcing...
CVE-2016-0329
Open redirect vulnerability in IBM Emptoris Sourcing 10.0.0.x before 10.0.0.1iFix3, 10.0.1.x before 10.0.1.3iFix3, 10.0.2.x before 10.0.2.8iFix1, 10.0.4.0 before 10.0.4.0iFix8, and 10.1.0.0 before 10.1.0.0iFix3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing...
PT-2018-4610
Name of the Vulnerable Software and Affected Versions IBM Emptoris Sourcing versions 10.0.0.x through 10.0.0.1 iFix2 IBM Emptoris Sourcing versions 10.0.1.x through 10.0.1.3 iFix2 IBM Emptoris Sourcing versions 10.0.2.x through 10.0.2.8 IBM Emptoris Sourcing versions 10.0.4.0 through 10.0.4.0 iFi...
CVE-2016-0329: URL Redirection to Untrusted Site
Open redirect vulnerability in IBM Emptoris Sourcing 10.0.0.x before 10.0.0.1iFix3, 10.0.1.x before 10.0.1.3iFix3, 10.0.2.x before 10.0.2.8iFix1, 10.0.4.0 before 10.0.4.0iFix8, and 10.1.0.0 before 10.1.0.0iFix3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing...
IBM Emptoris Services Procurement User Enumeration Vulnerability
IBM Emptoris Services Procurement is a procurement management system from IBM USA. The system controls and manages the procurement lifecycle for third-party service categories. A user enumeration vulnerability exists in IBM Emptoris Services Procurement. An attacker could exploit the vulnerabilit...
IBM Emptoris Supplier Lifecycle Management Cross-Site Scripting Vulnerability (CNVD-2017-32480)
IBM Emptoris Supplier Lifecycle Management is a suite of automated management solutions from IBM USA. The product automates all business processes associated with suppliers. A cross-site scripting vulnerability exists in IBM Emptoris Supplier Lifecycle Management. A remote attacker can exploit th...
CVE-2017-1098
IBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...
Cross site scripting
IBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...
CVE-2017-1098
IBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...
CVE-2017-1098
CVE-2017-1098 affects IBM Emptoris Supplier Lifecycle Management, specifically the 10.1.0.x line. The connected documents confirm a cross-site scripting vulnerability in the Web UI that could enable an attacker to inject arbitrary JavaScript, potentially altering functionality and leading to cred...
CVE-2017-1098
IBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...
PT-2017-11656
Name of the Vulnerable Software and Affected Versions IBM Emptoris Supplier Lifecycle Management version 10.1.0.x Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...
CVE-2017-1098: Improper Neutralization of Input During Web Page Generation
IBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...
IBM Emptoris Strategic Supply Management Cross-Site Scripting Vulnerability (CNVD-2017-25667)
The IBM Emptoris Strategic Supply Management Platform is a common Web-based portal for accessing the Emptoris suite of products from IBM. A cross-site request forgery vulnerability exists in IBM Emptoris Strategic Supply Management Platform versions 10.0.0.x through 10.1.1.x. The vulnerability ca...
CVE-2017-1097
IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 120657...
CVE-2017-1097
IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 120657...
Cross site request forgery (csrf)
IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 120657...
CVE-2017-1097
IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to Cross-Site Request Forgery (CSRF), enabling an attacker to coerce a trusted user to perform malicious actions. This is supported by NVD entry CVE-2017-1097 and CNVD-2017-25667, which describe the CSRF iss...
CVE-2017-1097
IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 120657...
PT-2017-11646
Name of the Vulnerable Software and Affected Versions IBM Emptoris Strategic Supply Management Platform versions 10.0.0.x through 10.1.1.x Description The issue allows an attacker to execute malicious and unauthorized actions by exploiting cross-site request forgery. This could be done by...