Skip to content
Sign in
6.4 Medium

CVE-2020-4895 IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting

Description

IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190986.

Affected products and versions

Product Affected versions Fixed in
Emptoris Sourcing 10.1 10.1.0 → 10.1.3 No fix stated

Other CVEs of Emptoris Sourcing

The 15 CVEs of Emptoris Sourcing →
CVE-2020-4896 IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input… 6.5 Medium CVE-2019-4484 IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend… 4.3 Medium CVE-2019-4485 IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend… 4.3 Medium CVE-2019-4308 IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend… 4.3 Medium
Track this CVE