6.5
CVSSv2

CVE-2014-3041

Published: 26/08/2014 Updated: 29/08/2017
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
VMScore: 578
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in IBM Emptoris Contract Management 9.5.x prior to 9.5.0.6 iFix 10, 10.0.0.x prior to 10.0.0.1 iFix 10, 10.0.1.x prior to 10.0.1.4, and 10.0.2.x prior to 10.0.2.2 iFix 2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm emptoris contract management 10.0.1.2

ibm emptoris contract management 10.0.1.3

ibm emptoris contract management 9.5.0.4

ibm emptoris contract management 9.5.0.5

ibm emptoris contract management 10.0.2.0

ibm emptoris contract management 10.0.0.0

ibm emptoris contract management 10.0.0.1

ibm emptoris contract management 9.5.0.6

ibm emptoris contract management 10.0.1.0

ibm emptoris contract management 10.0.1.1

ibm emptoris contract management 9.5.0.2

ibm emptoris contract management 9.5.0.3

ibm emptoris contract management 10.0.2.1

ibm emptoris contract management 10.0.2.2

ibm emptoris contract management 9.5.0.0

ibm emptoris contract management 9.5.0.1