7.6
Élevée
CVE-2019-4481 IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL…
Description
IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 164064.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Emptoris Spend Analysis 10.1 | 10.1.0 → 10.1.3 | Pas de correctif indiqué |
| Contract Management 10.1 | 10.1.0 → 10.1.3 | Pas de correctif indiqué |
Autres CVE de Emptoris Spend Analysis
Les 10 CVE de Emptoris Spend Analysis →
CVE-2020-4897
IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote…
5.3
Moyenne
CVE-2019-4752
IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is…
7.6
Élevée
CVE-2019-4482
IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2019-4483
IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL…
7.6
Élevée