Skip to content
Sign in
Not rated

CVE-2016-8947 IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open…

Description

IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 118834

Affected products and versions

Product Affected versions Fixed in
Emptoris Sourcing 10.1 10.1.0 → 10.1.1 No fix stated
Emptoris Sourcing 10.0 10.0.0 → 10.0.4 No fix stated
Emptoris Sourcing 9.5 No fix stated

Other CVEs of Emptoris Sourcing

The 15 CVEs of Emptoris Sourcing →
CVE-2020-4896 IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input… 6.5 Medium CVE-2020-4895 IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting 6.4 Medium CVE-2019-4485 IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend… 4.3 Medium CVE-2019-4484 IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend… 4.3 Medium
Track this CVE