Not rated
CVE-2016-6029 IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 could allow a remote attacker to obtain sensitive…
Description
IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 116881.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Emptoris Strategic Supply Management 10.1 | 10.1.0.0 → 10.1.1.0 | No fix stated |
| Emptoris Strategic Supply Management 10.0 | 10.0.0.0 → 10.0.4.0 | No fix stated |
Other CVEs of Emptoris Strategic Supply Management
The 10 CVEs of Emptoris Strategic Supply Management →
CVE-2020-4898
IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an…
5.9
Medium
CVE-2020-4893
IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET…
5.9
Medium
CVE-2019-4752
IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is…
7.6
High
CVE-2017-1097
IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site request…
Not rated