7.6
Élevée
CVE-2019-4752 IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is…
Description
IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 173348.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Emptoris Strategic Supply Management 10.1 | 10.1.0.34 → 10.1.3.29 | Pas de correctif indiqué |
| Emptoris Spend Analysis 10.1 | 10.1.0 → 10.1.3 | Pas de correctif indiqué |
Autres CVE de Emptoris Strategic Supply Management
Les 10 CVE de Emptoris Strategic Supply Management →
CVE-2020-4898
IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an…
5.9
Moyenne
CVE-2020-4893
IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET…
5.9
Moyenne
CVE-2017-1097
IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site request…
Non notée
CVE-2016-6029
IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 could allow a remote attacker to obtain sensitive…
Non notée