Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:emptoris_strategic_supply_management:10.1.1.4:*:*:*:*:*:*:*

part: a version: 10.1.1.4 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductEmptoris Strategic Supply Management (83ae013a-09f0-5a66-bacc-8227ae6034a7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1448 vulnerable 2026-06-08 05:09:22.184350 Details available
IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 128173.
Published: 2017-08-09T18:00:00.000Z
Updated: 2024-09-16T19:51:54.921Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1190 vulnerable 2026-06-08 05:09:21.311042 Details available
IBM Emptoris Strategic Supply Management Platform 10.x and 10.1 could allow a local user with special access roles to execute arbitrary code on the system. By manipulating a configurable property, an attacker could exploit this vulnerability to gain full control over the system. IBM X-Force ID: 123559.
Published: 2017-08-14T22:00:00.000Z
Updated: 2024-09-16T19:41:49.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1097 vulnerable 2026-06-08 05:09:12.806532 Details available
IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 120657.
Published: 2017-09-05T21:00:00.000Z
Updated: 2024-09-16T16:28:01.282Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8952 vulnerable 2026-06-08 05:08:22.280671 Details available
IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118839.
Published: 2017-07-13T15:00:00.000Z
Updated: 2024-09-16T19:36:18.106Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8951 vulnerable 2026-06-08 05:08:22.278737 Details available
IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to a denial of service attack. An attacker can exploit a vulnerability in the authentication features that could log out users and flood user accounts with emails. IBM X-Force ID: 118838.
Published: 2017-07-13T15:00:00.000Z
Updated: 2024-09-17T03:32:58.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8949 vulnerable 2026-06-08 05:08:22.260921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6121 vulnerable 2026-06-08 05:07:58.953142 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6118 vulnerable 2026-06-08 05:07:58.949310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6029 vulnerable 2026-06-08 05:07:58.630378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6021 vulnerable 2026-06-08 05:07:58.544339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6019 vulnerable 2026-06-08 05:07:58.534098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.