CVE-2016-8946

CVE-2016-8946 affects IBM Emptoris Sourcing 9.5.x through 10.1.x. The issue is a cross-site scripting vulnerability in the Web UI that lets an attacker embed arbitrary JavaScript, potentially altering functionality and leading to credentials disclosure within a trusted session. The IBM bulletin c...