4.3
Medium
CVE-2019-4485 IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend…
Description
IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164069.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Contract Management 10.1 | 10.1.0 → 10.1.3 | No fix stated |
| Emptoris Spend Analysis 10.1 | 10.1.0 → 10.1.3 | No fix stated |
| Emptoris Sourcing 10.1 | 10.1.0 → 10.1.3 | No fix stated |
Other CVEs of Contract Management
The 5 CVEs of Contract Management →
CVE-2019-4483
IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL…
7.6
High
CVE-2019-4484
IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend…
4.3
Medium
CVE-2019-4308
IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend…
4.3
Medium
CVE-2019-4481
IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL…
7.6
High