Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

ibm / emptoris_sourcing CVEs

Beta · best-effort

16 CVEs tagged to ibm / emptoris_sourcing — 0 Critical, 0 High, 16 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to ibm vendor archive

CVE-2020-4896

Published Jan 7, 2021

IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 19098…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2016-0329

Published Feb 2, 2018

Open redirect vulnerability in IBM Emptoris Sourcing 10.0.0.x before 10.0.0.1_iFix3, 10.0.1.x before 10.0.1.3_iFix3, 10.0.2.x before 10.0.2.8_iFix1, 10.0.4.0 before 10.0.4.0_iFix8…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-1450

Published Aug 31, 2017

IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted We…

CVSS 6.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-1449

Published Aug 31, 2017

IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted We…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-1447

Published Aug 31, 2017

IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intend…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-1444

Published Aug 31, 2017

IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intend…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2016-8953

Published Jul 12, 2017

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-cr…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2016-8950

Published Jul 12, 2017

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering th…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2016-8948

Published Jul 12, 2017

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering th…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2016-8947

Published Jul 12, 2017

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-cr…

CVSS 6.1 · Medium
Vendor/product tagsBeta · best-effort

CVE-2016-8946

Published Jul 12, 2017

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering th…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2016-6114

Published Jul 12, 2017

IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering th…

CVSS 5.4 · Medium
Vendor/product tagsBeta · best-effort

CVE-2015-5024

Published Oct 6, 2015

IBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before iFix4, 10.0.2.6 before iFix8, 10.0.2.7 before iFix1, and 10.0.4.x before iFix2 allow…

CVSS 4.0 · Medium
Vendor/product tagsBeta · best-effort
Showing 1-16 of 16 CVEsPage 1 of 1