4.3
Medium
CVE-2019-4308 IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend…
Description
IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 could allow an authenticated user to obtain sensitive information from error messages IBM X-Force ID: 161034.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Emptoris Sourcing 10.1 | 10.1.0 → 10.1.3 | No fix stated |
| Contract Management 10.1 | 10.1.0 → 10.1.3 | No fix stated |
| Emptoris Spend Analysis 10.1 | 10.1.0 → 10.1.3 | No fix stated |
Other CVEs of Emptoris Sourcing
The 15 CVEs of Emptoris Sourcing →
CVE-2020-4896
IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input…
6.5
Medium
CVE-2020-4895
IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting
6.4
Medium
CVE-2019-4485
IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend…
4.3
Medium
CVE-2019-4484
IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend…
4.3
Medium