Lucene search

K
IbmEmptoris Sourcing10.0.0

10 matches found

CVE
CVE
added 2017/08/31 2:29 p.m.52 views

CVE-2017-1450

IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious ...

6.1CVSS5.8AI score0.0015EPSS
CVE
CVE
added 2017/08/31 2:29 p.m.47 views

CVE-2017-1447

IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128172.

5.4CVSS5.3AI score0.00198EPSS
CVE
CVE
added 2017/07/12 5:29 p.m.37 views

CVE-2016-8946

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118833.

5.4CVSS5.3AI score0.00269EPSS
CVE
CVE
added 2017/08/31 2:29 p.m.35 views

CVE-2017-1449

IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious ...

5.4CVSS5.2AI score0.00084EPSS
CVE
CVE
added 2017/07/12 5:29 p.m.34 views

CVE-2016-8950

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118837.

5.4CVSS5.3AI score0.00235EPSS
CVE
CVE
added 2017/08/31 2:29 p.m.34 views

CVE-2017-1444

IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128110.

5.4CVSS5.3AI score0.00198EPSS
CVE
CVE
added 2017/07/12 5:29 p.m.32 views

CVE-2016-8953

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a ma...

5.4CVSS5.3AI score0.00119EPSS
CVE
CVE
added 2017/07/12 5:29 p.m.30 views

CVE-2016-6114

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118352.

5.4CVSS5.3AI score0.00269EPSS
CVE
CVE
added 2017/07/12 5:29 p.m.30 views

CVE-2016-8947

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a ma...

6.1CVSS5.8AI score0.00212EPSS
CVE
CVE
added 2017/07/12 5:29 p.m.27 views

CVE-2016-8948

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118835.

5.4CVSS5.3AI score0.00269EPSS