Not rated
CVE-2016-6018 IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an…
Description
IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Emptoris Contract Management | 10.1.0 | No fix stated |
| Emptoris Contract Management 10.0 | 10.0.0.0 → 10.0.4.0 | No fix stated |
Other CVEs of Emptoris Contract Management
The 4 CVEs of Emptoris Contract Management →
CVE-2020-4897
IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote…
5.3
Medium
CVE-2020-4892
IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting
5.4
Medium
CVE-2018-1961
IBM Emptoris Contract Management 10.0.0 and 10.1.3.0 could disclose sensitive information from detailed information from…
5.3
Medium