CVE-2017-1440

CVE-2017-1440 affects IBM Emptoris Services Procurement 10.x. The vulnerability allows a remote attacker to include arbitrary files by sending a specially crafted URL, enabling remote code execution on the vulnerable web server. The IBM security bulletin lists multiple CVEs for the product, with ...

CVE-2017-1440

IBM Emptoris Services Procurement 10.0.0.5 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM...