Sign in

6.5 Medium

CVE-2020-4896 IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input…

Description

IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 190987.

Affected products and versions

Product	Affected versions	Fixed in
Emptoris Sourcing 10.1	10.1.0 → 10.1.3	No fix stated

The 15 CVEs of Emptoris Sourcing →

CVE-2020-4895 IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting 6.4 Medium CVE-2019-4484 IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend… 4.3 Medium CVE-2019-4485 IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend… 4.3 Medium CVE-2019-4308 IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend… 4.3 Medium

Do you use Emptoris Sourcing?

Track this CVE Watch Emptoris Sourcing Check my SBOMs

www.cveye.io/en/cve/CVE-2020-4896

Timeline

Published January 7, 2021
Last modified September 16, 2024

References

www.ibm.com www.ibm.com
ibm-emptoris-cve20204896-cache-poisoning (190987) exchange.xforce.ibmcloud.com

Track this CVE