Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm emptoris spend analysis vulnerabilities and exploits

(subscribe to this query)
312
VMScore
CVE-2017-1446
IBM Emptoris Spend Analysis 9.5.0.0 up to and including 10.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t...
Ibm Emptoris Spend Analysis 9.5.0.0Ibm Emptoris Spend Analysis 9.5.0.1Ibm Emptoris Spend Analysis 9.5.0.2Ibm Emptoris Spend Analysis 9.5.0.3Ibm Emptoris Spend Analysis 9.5.0.4Ibm Emptoris Spend Analysis 10.0.0.0Ibm Emptoris Spend Analysis 10.0.0.1Ibm Emptoris Spend Analysis 10.0.1.0Ibm Emptoris Spend Analysis 10.0.2.0Ibm Emptoris Spend Analysis 10.0.4.0Ibm Emptoris Spend Analysis 10.1.1.0
312
VMScore
CVE-2017-1445
IBM Emptoris Spend Analysis 9.5.0.0 up to and including 10.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t...
Ibm Emptoris Spend Analysis 10.0.1Ibm Emptoris Spend Analysis 9.5.0.1Ibm Emptoris Spend Analysis 9.5.0.2Ibm Emptoris Spend Analysis 9.5.0.3Ibm Emptoris Spend Analysis 9.5.0.4Ibm Emptoris Spend Analysis 10.0.0.0Ibm Emptoris Spend Analysis 10.0.2Ibm Emptoris Spend Analysis 10.1.1Ibm Emptoris Spend Analysis 10.0.0.1Ibm Emptoris Spend Analysis 10.0.4Ibm Emptoris Spend Analysis 9.5.0.0Ibm Emptoris Spend Analysis 10.0.1.0
312
VMScore
CVE-2014-3035
Cross-site scripting (XSS) vulnerability in IBM Emptoris Spend Analysis 9.5.x prior to 9.5.0.4, 10.0.1.x prior to 10.0.1.3, and 10.0.2.x prior to 10.0.2.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Ibm Emptoris Spend Analysis 10.0.2.0Ibm Emptoris Spend Analysis 10.0.2.2Ibm Emptoris Spend Analysis 10.0.1.0Ibm Emptoris Spend Analysis 10.0.1.1Ibm Emptoris Spend Analysis 10.0.1.2Ibm Emptoris Spend Analysis 9.5.0.0Ibm Emptoris Spend Analysis 9.5.0.1Ibm Emptoris Spend Analysis 9.5.0.2Ibm Emptoris Spend Analysis 9.5.0.3
605
VMScore
CVE-2014-3061
Cross-site request forgery (CSRF) vulnerability in IBM Emptoris Spend Analysis 9.5.x prior to 9.5.0.4, 10.0.1.x prior to 10.0.1.3, and 10.0.2.x prior to 10.0.2.4 allows remote malicious users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Ibm Emptoris Spend Analysis 9.5.0.2Ibm Emptoris Spend Analysis 9.5.0.3Ibm Emptoris Spend Analysis 9.5.0.0Ibm Emptoris Spend Analysis 9.5.0.1Ibm Emptoris Spend Analysis 10.0.1.1Ibm Emptoris Spend Analysis 10.0.1.2Ibm Emptoris Spend Analysis 10.0.2.0Ibm Emptoris Spend Analysis 10.0.2.2Ibm Emptoris Spend Analysis 10.0.1.0
436
VMScore
CVE-2014-4790
IBM Emptoris Sourcing Portfolio 9.5.x prior to 9.5.1.3, 10.0.0.x prior to 10.0.0.1, 10.0.1.x prior to 10.0.1.3, and 10.0.2.x prior to 10.0.2.4 and Emptoris Spend Analysis 9.5.x prior to 9.5.0.4, 10.0.1.x prior to 10.0.1.3, and 10.0.2.x prior to 10.0.2.4 do not properly restrict u...
Ibm Emptoris Spend Analysis 10.0.2.2Ibm Emptoris Spend Analysis 9.5.0.2Ibm Emptoris Spend Analysis 9.5.0.3Ibm Emptoris Spend Analysis 10.0.2.0Ibm Emptoris Spend Analysis 10.0.1.0Ibm Emptoris Spend Analysis 9.5.0.0Ibm Emptoris Spend Analysis 9.5.0.1Ibm Emptoris Spend Analysis 10.0.1.1Ibm Emptoris Spend Analysis 10.0.1.2Ibm Emptoris Sourcing Portfolio 10.0.1.0Ibm Emptoris Sourcing Portfolio 10.0.0.0Ibm Emptoris Sourcing Portfolio 10.0.2.3Ibm Emptoris Sourcing Portfolio 9.5.1.2Ibm Emptoris Sourcing Portfolio 9.5.1.1Ibm Emptoris Sourcing Portfolio 9.5.1.0Ibm Emptoris Sourcing Portfolio 10.0.1.2Ibm Emptoris Sourcing Portfolio 10.0.1.1Ibm Emptoris Sourcing Portfolio 9.5.0.0Ibm Emptoris Sourcing Portfolio 10.0.2.2Ibm Emptoris Sourcing Portfolio 10.0.2.0Ibm Emptoris Sourcing Portfolio 9.5.0.2Ibm Emptoris Sourcing Portfolio 9.5.0.1
534
VMScore
CVE-2014-3040
Cross-site request forgery (CSRF) vulnerability in IBM Emptoris Contract Management 9.5.x prior to 9.5.0.6 iFix 10, 10.0.0.x prior to 10.0.0.1 iFix 10, 10.0.1.x prior to 10.0.1.4, and 10.0.2.x prior to 10.0.2.2 iFix 2; Emptoris Sourcing Portfolio 9.5.x prior to 9.5.1.3, 10.0.0.x ...
Ibm Emptoris Spend Analysis 10.0.0.1Ibm Emptoris Spend Analysis 10.0.0.0Ibm Emptoris Spend Analysis 10.0.2.0Ibm Emptoris Spend Analysis 10.0.1.2Ibm Emptoris Spend Analysis 9.5.0.1Ibm Emptoris Spend Analysis 9.5.0.0Ibm Emptoris Spend Analysis 10.0.2.2Ibm Emptoris Spend Analysis 9.5.0.3Ibm Emptoris Spend Analysis 9.5.0.2Ibm Emptoris Spend Analysis 10.0.1.1Ibm Emptoris Spend Analysis 10.0.1.0Ibm Emptoris Sourcing Portfolio 10.0.1.0Ibm Emptoris Sourcing Portfolio 10.0.0.0Ibm Emptoris Sourcing Portfolio 10.0.1.2Ibm Emptoris Sourcing Portfolio 10.0.1.1Ibm Emptoris Sourcing Portfolio 9.5.0.0Ibm Emptoris Sourcing Portfolio 10.0.2.2Ibm Emptoris Sourcing Portfolio 10.0.2.0Ibm Emptoris Sourcing Portfolio 9.5.1.0Ibm Emptoris Sourcing Portfolio 9.5.0.2Ibm Emptoris Sourcing Portfolio 9.5.0.1Ibm Emptoris Sourcing Portfolio 10.0.2.3
668
VMScore
CVE-2019-4481
IBM Contract Management 10.1.0 up to and including 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 up to and including 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the malicious user to view, add, modify or ...
Ibm Emptoris Spend AnalysisIbm Emptoris Contract Management
668
VMScore
CVE-2019-4483
IBM Contract Management 10.1.0 up to and including 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 up to and including 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the malicious user to view, add, modify or ...
Ibm Emptoris Spend AnalysisIbm Emptoris Contract Management
445
VMScore
CVE-2020-4897
IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote malicious user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks ag...
Ibm Emptoris Contract ManagementIbm Emptoris Spend Analysis
312
VMScore
CVE-2019-4482
IBM Emptoris Spend Analysis 10.1.0 up to and including 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tr...
Ibm Emptoris Spend Analysis
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook