Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm emptoris contract management vulnerabilities and exploits

(subscribe to this query)
356
VMScore
CVE-2016-6018
IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an malicious user to gain additional information to conduct further attacks. IBM X-Force ID: 116738.
Ibm Emptoris Contract Management 10.0.2.12Ibm Emptoris Contract Management 10.0.2.14Ibm Emptoris Contract Management 10.0.0.1Ibm Emptoris Contract Management 10.0.1.1Ibm Emptoris Contract Management 10.0.2.2Ibm Emptoris Contract Management 10.0.2.5Ibm Emptoris Contract Management 10.1.0.0Ibm Emptoris Contract Management 10.0.2.8Ibm Emptoris Contract Management 10.0.2.9Ibm Emptoris Contract Management 10.0.2.10Ibm Emptoris Contract Management 10.0.1.3Ibm Emptoris Contract Management 10.0.1.4Ibm Emptoris Contract Management 10.0.1.5Ibm Emptoris Contract Management 10.0.2.0Ibm Emptoris Contract Management 10.0.2.15Ibm Emptoris Contract Management 10.0.2.16Ibm Emptoris Contract Management 10.0.2.17Ibm Emptoris Contract Management 10.0.0.0Ibm Emptoris Contract Management 10.0.2.7Ibm Emptoris Contract Management 10.0.4.0Ibm Emptoris Contract Management 10.0.2.11Ibm Emptoris Contract Management 10.0.2.13
445
VMScore
CVE-2015-5042
IBM Emptoris Contract Management 9.5.0.x prior to 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x prior to 10.0.1.5 iFix5, 10.0.2.x prior to 10.0.2.7 iFix4, and 10.0.4.x prior to 10.0.4.0 iFix3 allows remote malicious users to execute arbitrary code by including a crafted Flash file.
Ibm Emptoris Contract Management 9.5.0.2Ibm Emptoris Contract Management 9.5.0.1Ibm Emptoris Contract Management 9.5.0.0Ibm Emptoris Contract Management 9.5.0.6Ibm Emptoris Contract Management 9.5.0.4Ibm Emptoris Contract Management 10.0.2.1Ibm Emptoris Contract Management 10.0.1.5Ibm Emptoris Contract Management 10.0.1.0Ibm Emptoris Contract Management 10.0.0.0Ibm Emptoris Contract Management 10.0.2.6Ibm Emptoris Contract Management 10.0.2.5Ibm Emptoris Contract Management 10.0.2.4Ibm Emptoris Contract Management 10.0.1.4Ibm Emptoris Contract Management 10.0.1.3Ibm Emptoris Contract Management 10.0.1.2Ibm Emptoris Contract Management 10.0.1.1Ibm Emptoris Contract Management 10.0.2.3Ibm Emptoris Contract Management 10.0.2.7Ibm Emptoris Contract Management 9.5.0.5Ibm Emptoris Contract Management 9.5.0.3Ibm Emptoris Contract Management 10.0.2.2Ibm Emptoris Contract Management 10.0.2.0
605
VMScore
CVE-2015-5050
Cross-site request forgery (CSRF) vulnerability in IBM Emptoris Contract Management 9.5.0.x prior to 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x prior to 10.0.1.5 iFix5, 10.0.2.x prior to 10.0.2.7 iFix4, and 10.0.4.x prior to 10.0.4.0 iFix3 allows remote authenticated users to hijack t...
Ibm Emptoris Contract Management 10.0.2.5Ibm Emptoris Contract Management 10.0.1.3Ibm Emptoris Contract Management 10.0.1.1Ibm Emptoris Contract Management 9.5.0.2Ibm Emptoris Contract Management 9.5.0.0Ibm Emptoris Contract Management 10.0.0.1Ibm Emptoris Contract Management 10.0.0.0Ibm Emptoris Contract Management 9.5.0.5Ibm Emptoris Contract Management 9.5.0.4Ibm Emptoris Contract Management 10.0.2.3Ibm Emptoris Contract Management 10.0.2.2Ibm Emptoris Contract Management 10.0.2.1Ibm Emptoris Contract Management 10.0.2.0Ibm Emptoris Contract Management 10.0.1.4Ibm Emptoris Contract Management 10.0.4.0Ibm Emptoris Contract Management 10.0.2.7Ibm Emptoris Contract Management 10.0.1.5Ibm Emptoris Contract Management 9.5.0.6Ibm Emptoris Contract Management 10.0.2.6Ibm Emptoris Contract Management 10.0.2.4Ibm Emptoris Contract Management 10.0.1.2Ibm Emptoris Contract Management 10.0.1.0
312
VMScore
CVE-2015-7398
Cross-site scripting (XSS) vulnerability in IBM Emptoris Contract Management 9.5.0.x prior to 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x prior to 10.0.1.5 iFix5, 10.0.2.x prior to 10.0.2.7 iFix4, and 10.0.4.x prior to 10.0.4.0 iFix3 allows remote authenticated users to inject arbitrar...
Ibm Emptoris Contract Management 9.5.0.5Ibm Emptoris Contract Management 9.5.0.4Ibm Emptoris Contract Management 9.5.0.3Ibm Emptoris Contract Management 9.5.0.2Ibm Emptoris Contract Management 10.0.0.1Ibm Emptoris Contract Management 10.0.0.0Ibm Emptoris Contract Management 10.0.4.0Ibm Emptoris Contract Management 10.0.2.7Ibm Emptoris Contract Management 10.0.2.1Ibm Emptoris Contract Management 10.0.2.0Ibm Emptoris Contract Management 10.0.1.5Ibm Emptoris Contract Management 10.0.1.4Ibm Emptoris Contract Management 10.0.2.5Ibm Emptoris Contract Management 9.5.0.6Ibm Emptoris Contract Management 9.5.0.1Ibm Emptoris Contract Management 10.0.2.3Ibm Emptoris Contract Management 10.0.1.2Ibm Emptoris Contract Management 10.0.1.0Ibm Emptoris Contract Management 10.0.2.6Ibm Emptoris Contract Management 10.0.2.4Ibm Emptoris Contract Management 9.5.0.0Ibm Emptoris Contract Management 10.0.2.2
578
VMScore
CVE-2014-3041
SQL injection vulnerability in IBM Emptoris Contract Management 9.5.x prior to 9.5.0.6 iFix 10, 10.0.0.x prior to 10.0.0.1 iFix 10, 10.0.1.x prior to 10.0.1.4, and 10.0.2.x prior to 10.0.2.2 iFix 2 allows remote authenticated users to execute arbitrary SQL commands via unspecifie...
Ibm Emptoris Contract Management 10.0.1.2Ibm Emptoris Contract Management 10.0.1.3Ibm Emptoris Contract Management 9.5.0.4Ibm Emptoris Contract Management 9.5.0.5Ibm Emptoris Contract Management 10.0.2.0Ibm Emptoris Contract Management 10.0.0.0Ibm Emptoris Contract Management 10.0.0.1Ibm Emptoris Contract Management 9.5.0.6Ibm Emptoris Contract Management 10.0.1.0Ibm Emptoris Contract Management 10.0.1.1Ibm Emptoris Contract Management 9.5.0.2Ibm Emptoris Contract Management 9.5.0.3Ibm Emptoris Contract Management 10.0.2.1Ibm Emptoris Contract Management 10.0.2.2Ibm Emptoris Contract Management 9.5.0.0Ibm Emptoris Contract Management 9.5.0.1
312
VMScore
CVE-2014-3034
Cross-site scripting (XSS) vulnerability in IBM Emptoris Contract Management 9.5.x prior to 9.5.0.6 iFix 10, 10.0.0.x prior to 10.0.0.1 iFix 10, 10.0.1.x prior to 10.0.1.4, and 10.0.2.x prior to 10.0.2.2 iFix 2 allows remote authenticated users to inject arbitrary web script or H...
Ibm Emptoris Contract Management 9.5.0.2Ibm Emptoris Contract Management 9.5.0.3Ibm Emptoris Contract Management 9.5.0.4Ibm Emptoris Contract Management 9.5.0.5Ibm Emptoris Contract Management 9.5.0.6Ibm Emptoris Contract Management 10.0.2.0Ibm Emptoris Contract Management 10.0.0.0Ibm Emptoris Contract Management 10.0.0.1Ibm Emptoris Contract Management 9.5.0.0Ibm Emptoris Contract Management 9.5.0.1Ibm Emptoris Contract Management 10.0.1.2Ibm Emptoris Contract Management 10.0.1.3Ibm Emptoris Contract Management 10.0.2.1Ibm Emptoris Contract Management 10.0.2.2Ibm Emptoris Contract Management 10.0.1.0Ibm Emptoris Contract Management 10.0.1.1
534
VMScore
CVE-2014-3040
Cross-site request forgery (CSRF) vulnerability in IBM Emptoris Contract Management 9.5.x prior to 9.5.0.6 iFix 10, 10.0.0.x prior to 10.0.0.1 iFix 10, 10.0.1.x prior to 10.0.1.4, and 10.0.2.x prior to 10.0.2.2 iFix 2; Emptoris Sourcing Portfolio 9.5.x prior to 9.5.1.3, 10.0.0.x ...
Ibm Emptoris Spend Analysis 10.0.0.1Ibm Emptoris Spend Analysis 10.0.0.0Ibm Emptoris Spend Analysis 10.0.2.0Ibm Emptoris Spend Analysis 10.0.1.2Ibm Emptoris Spend Analysis 9.5.0.1Ibm Emptoris Spend Analysis 9.5.0.0Ibm Emptoris Spend Analysis 10.0.2.2Ibm Emptoris Spend Analysis 9.5.0.3Ibm Emptoris Spend Analysis 9.5.0.2Ibm Emptoris Spend Analysis 10.0.1.1Ibm Emptoris Spend Analysis 10.0.1.0Ibm Emptoris Sourcing Portfolio 10.0.1.0Ibm Emptoris Sourcing Portfolio 10.0.0.0Ibm Emptoris Sourcing Portfolio 10.0.1.2Ibm Emptoris Sourcing Portfolio 10.0.1.1Ibm Emptoris Sourcing Portfolio 9.5.0.0Ibm Emptoris Sourcing Portfolio 10.0.2.2Ibm Emptoris Sourcing Portfolio 10.0.2.0Ibm Emptoris Sourcing Portfolio 9.5.1.0Ibm Emptoris Sourcing Portfolio 9.5.0.2Ibm Emptoris Sourcing Portfolio 9.5.0.1Ibm Emptoris Sourcing Portfolio 10.0.2.3
356
VMScore
CVE-2014-6212
The Echo API in IBM Emptoris Contract Management 9.5.x prior to 9.5.0.6 iFix11, 10.0.0.x prior to 10.0.0.1 iFix12, 10.0.1.x prior to 10.0.1.5 iFix2, and 10.0.2.x prior to 10.0.2.2 iFix5; Emptoris Sourcing 9.5 prior to 9.5.1.3 iFix2, 10.0.0.x prior to 10.0.0.1 iFix1, 10.0.1.x prio...
Ibm Emptoris Sourcing Portfolio 9.5.0.0Ibm Emptoris Sourcing Portfolio 10.0.0.0Ibm Emptoris Sourcing Portfolio 10.0.0.1Ibm Emptoris Sourcing Portfolio 10.0.2.4Ibm Emptoris Sourcing Portfolio 9.5.1.0Ibm Emptoris Sourcing Portfolio 9.5.1.1Ibm Emptoris Sourcing Portfolio 10.0.1.3Ibm Emptoris Sourcing Portfolio 10.0.2.0Ibm Emptoris Sourcing Portfolio 9.5.0.1Ibm Emptoris Sourcing Portfolio 9.5.0.2Ibm Emptoris Sourcing Portfolio 10.0.1.0Ibm Emptoris Sourcing Portfolio 10.0.1.1Ibm Emptoris Sourcing Portfolio 10.0.1.2Ibm Emptoris Sourcing Portfolio 9.5.1.2Ibm Emptoris Sourcing Portfolio 9.5.1.3Ibm Emptoris Sourcing Portfolio 10.0.2.2Ibm Emptoris Sourcing Portfolio 10.0.2.3Ibm Emptoris Program Management 10.0.1.2Ibm Emptoris Program Management 10.0.1.3Ibm Emptoris Program Management 10.0.0.2Ibm Emptoris Program Management 10.0.0.3Ibm Emptoris Program Management 10.0.2.1
356
VMScore
CVE-2019-4484
IBM Emptoris Sourcing 10.1.0 up to and including 10.1.3, IBM Contract Management 10.1.0 up to and including 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 up to and including 10.1.3 generates an error message that includes sensitive information that could be used in further attac...
Ibm Emptoris SourcingIbm Emptoris Spend AnalysisIbm Emptoris Contract Management
356
VMScore
CVE-2019-4308
IBM Emptoris Sourcing 10.1.0 up to and including 10.1.3, IBM Contract Management 10.1.0 up to and including 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 up to and including 10.1.3 could allow an authenticated user to obtain sensitive information from error messages IBM X-Force ...
Ibm Emptoris SourcingIbm Emptoris Spend AnalysisIbm Emptoris Contract Management
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook