PT-2014-5055

Name of the Vulnerable Software and Affected Versions IBM Emptoris Spend Analysis versions 9.5.x through 9.5.0.3 IBM Emptoris Spend Analysis versions 10.0.1.x through 10.0.1.2 IBM Emptoris Spend Analysis versions 10.0.2.x through 10.0.2.3 Description A cross-site request forgery CSRF issue allows...

PT-2014-5032

Name of the Vulnerable Software and Affected Versions IBM Emptoris Sourcing Portfolio versions 9.5.x through 9.5.1.2 IBM Emptoris Sourcing Portfolio versions 10.0.0.x through 10.0.0.0 IBM Emptoris Sourcing Portfolio versions 10.0.1.x through 10.0.1.2 IBM Emptoris Sourcing Portfolio versions...

CVE-2014-3035: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2014-5033

Name of the Vulnerable Software and Affected Versions IBM Emptoris Contract Management versions 9.5.x through 9.5.0.5 IBM Emptoris Contract Management versions 10.0.0.x through 10.0.0.0 IBM Emptoris Contract Management versions 10.0.1.x through 10.0.1.3 IBM Emptoris Contract Management versions...

PT-2014-5038

Name of the Vulnerable Software and Affected Versions IBM Emptoris Contract Management versions 9.5.x through 9.5.0.6 iFix 9, 10.0.0.x through 10.0.0.1 iFix 9, 10.0.1.x through 10.0.1.3, and 10.0.2.x through 10.0.2.1 iFix 1 IBM Emptoris Sourcing Portfolio versions 9.5.x through 9.5.1.2, 10.0.0.x...