EUVD-2015-5041

Malware in sbrugna...

IBM Emptoris Sourcing Information Disclosure Vulnerability

IBM Emptoris Sourcing is a suite of platforms from IBM USA for supplier sourcing decisions, examining cost, risk and performance, helping organizations get affordable prices and greater value from their suppliers. An information disclosure vulnerability exists in IBM Emptoris Sourcing that allows...

CVE-2015-5024

IBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before iFix4, 10.0.2.6 before iFix8, 10.0.2.7 before iFix1, and 10.0.4.x before iFix2 allows remote authenticated users to obtain sensitive supplier-bid information via unspecified vectors...

CVE-2015-5024

IBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before iFix4, 10.0.2.6 before iFix8, 10.0.2.7 before iFix1, and 10.0.4.x before iFix2 allows remote authenticated users to obtain sensitive supplier-bid information via unspecified vectors...

Code injection

IBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before iFix4, 10.0.2.6 before iFix8, 10.0.2.7 before iFix1, and 10.0.4.x before iFix2 allows remote authenticated users to obtain sensitive supplier-bid information via unspecified vectors...

CVE-2015-5024: Exposure of Sensitive Information to an Unauthorized Actor

IBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before iFix4, 10.0.2.6 before iFix8, 10.0.2.7 before iFix1, and 10.0.4.x before iFix2 allows remote authenticated users to obtain sensitive supplier-bid information via unspecified vectors...

PT-2015-6755

Name of the Vulnerable Software and Affected Versions IBM Emptoris Sourcing versions 10.0.2.0 through 10.0.2.0 before iFix6 IBM Emptoris Sourcing versions 10.0.2.2 through 10.0.2.2 before iFix11 IBM Emptoris Sourcing version 10.0.2.3 IBM Emptoris Sourcing versions 10.0.2.5 through 10.0.2.5 before...