Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

593 matches found

Prion
Prion•added 2017/07/12 5:29 p.m.•18 views

Open redirect

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...

4.9CVSS6AI score0.00686EPSS
SaveExploits0References3Affected Software1
OSV
OSV•added 2017/07/12 5:29 p.m.•8 views

CVE-2016-8948

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

5.4CVSS5.4AI score0.00729EPSS
SaveExploits0References3
NVD
NVD•added 2017/07/12 5:29 p.m.•14 views

CVE-2016-8953

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...

5.4CVSS5.1AI score0.00686EPSS
SaveExploits0References3
OSV
OSV•added 2017/07/12 5:29 p.m.•6 views

CVE-2016-8950

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

5.4CVSS5.4AI score0.00974EPSS
SaveExploits0References3
Prion
Prion•added 2017/07/12 5:29 p.m.•12 views

Open redirect

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...

5.8CVSS6AI score0.00994EPSS
SaveExploits0References3Affected Software1
Prion
Prion•added 2017/07/12 5:29 p.m.•20 views

Cross site scripting

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11835...

3.5CVSS6.2AI score0.00729EPSS
SaveExploits0References3Affected Software1
Prion
Prion•added 2017/07/12 5:29 p.m.•16 views

Cross site scripting

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

3.5CVSS6.2AI score0.00729EPSS
SaveExploits0References3Affected Software1
OSV
OSV•added 2017/07/12 5:29 p.m.•5 views

CVE-2016-6114

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11835...

5.4CVSS5.4AI score0.00729EPSS
SaveExploits0References3
NVD
NVD•added 2017/07/12 5:29 p.m.•22 views

CVE-2016-8947

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...

6.1CVSS5.9AI score0.00994EPSS
SaveExploits0References3
NVD
NVD•added 2017/07/12 5:29 p.m.•20 views

CVE-2016-8950

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

5.4CVSS5.2AI score0.00974EPSS
SaveExploits0References3
OSV
OSV•added 2017/07/12 5:29 p.m.•2 views

CVE-2016-8953

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...

5.4CVSS5.6AI score0.00686EPSS
SaveExploits0References3
NVD
NVD•added 2017/07/12 5:29 p.m.•17 views

CVE-2016-8948

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

5.4CVSS5.2AI score0.00729EPSS
SaveExploits0References3
OSV
OSV•added 2017/07/12 5:29 p.m.•5 views

CVE-2016-8946

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

5.4CVSS5.4AI score0.00729EPSS
SaveExploits0References3
NVD
NVD•added 2017/07/12 5:29 p.m.•18 views

CVE-2016-6114

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11835...

5.4CVSS5.2AI score0.00729EPSS
SaveExploits0References3
CVE
CVE•added 2017/07/12 5:0 p.m.•51 views

CVE-2016-8946

CVE-2016-8946 affects IBM Emptoris Sourcing 9.5.x through 10.1.x. The issue is a cross-site scripting vulnerability in the Web UI that lets an attacker embed arbitrary JavaScript, potentially altering functionality and leading to credentials disclosure within a trusted session. The IBM bulletin c...

5.4CVSS5.3AI score0.00729EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2017/07/12 5:0 p.m.•29 views

CVE-2016-8948

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11883...

5.2AI score0.00729EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2017/07/12 5:0 p.m.•28 views

CVE-2016-8947

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...

5.9AI score0.00994EPSS
SaveExploits0References3
CVE
CVE•added 2017/07/12 5:0 p.m.•48 views

CVE-2016-8950

CVE-2016-8950 affects IBM Emptoris Sourcing 9.5.x–10.1.x and is a cross-site scripting vulnerability in the Web UI that can allow embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The IBM security bulletin confirms this vulnerability and provi...

5.4CVSS5.3AI score0.00974EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2017/07/12 5:0 p.m.•19 views

CVE-2016-8953

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...

5.1AI score0.00686EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2017/07/12 5:0 p.m.•25 views

CVE-2016-6114

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 11835...

5.2AI score0.00729EPSS
SaveExploits0References3
Rows per page
Query Builder