GCVE - cpe:2.3:a:ibm:contract_management:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:contract_management:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Contract Management (`41da69c1-d65a-529a-936f-90ac1e284832`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-4485`	vulnerable	2026-06-08 05:13:57.230122	Details available MEDIUM (4.3) IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164069. Published: 2019-08-20T18:25:27.111Z Updated: 2024-09-17T01:50:37.798Z Open on db.gcve.eu Reference links https://www.ibm.com/support/docview.wss?uid=ibm10880221 https://exchange.xforce.ibmcloud.com/vulnerabilities/164069	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4484`	vulnerable	2026-06-08 05:13:57.229704	Details available MEDIUM (4.3) IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164068. Published: 2019-08-20T18:25:27.063Z Updated: 2024-09-17T02:01:06.906Z Open on db.gcve.eu Reference links https://www.ibm.com/support/docview.wss?uid=ibm10880221 https://exchange.xforce.ibmcloud.com/vulnerabilities/164068	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4483`	vulnerable	2026-06-08 05:13:57.229209	Details available HIGH (7.6) IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 164067. Published: 2019-08-20T18:25:27.014Z Updated: 2024-09-17T01:51:43.626Z Open on db.gcve.eu Reference links https://www.ibm.com/support/docview.wss?uid=ibm10880223 https://exchange.xforce.ibmcloud.com/vulnerabilities/164067	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4481`	vulnerable	2026-06-08 05:13:57.228520	Details available HIGH (7.6) IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 164064. Published: 2019-08-20T18:25:26.966Z Updated: 2024-09-17T02:10:37.612Z Open on db.gcve.eu Reference links https://www.ibm.com/support/docview.wss?uid=ibm10880223 https://exchange.xforce.ibmcloud.com/vulnerabilities/164064	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-4308`	vulnerable	2026-06-08 05:13:57.066577	Details available MEDIUM (4.3) IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 could allow an authenticated user to obtain sensitive information from error messages IBM X-Force ID: 161034. Published: 2019-08-20T18:25:26.552Z Updated: 2024-09-17T00:40:47.653Z Open on db.gcve.eu Reference links https://www.ibm.com/support/docview.wss?uid=ibm10880221 https://exchange.xforce.ibmcloud.com/vulnerabilities/161034	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.