GCVE - cpe:2.3:a:ibm:emptoris_sourcing:9.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:emptoris_sourcing:9.5:*:*:*:*:*:*:*

part: a version: 9.5 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Emptoris Sourcing (`5e077712-be42-5ff4-8687-2242ce341e63`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-1450`	vulnerable	2026-06-08 05:09:22.194803	Details available IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 128177. Published: 2017-08-31T14:00:00.000Z Updated: 2024-09-17T03:02:45.143Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg22005834 https://exchange.xforce.ibmcloud.com/vulnerabilities/128177	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1449`	vulnerable	2026-06-08 05:09:22.194179	Details available IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 128174. Published: 2017-08-31T14:00:00.000Z Updated: 2024-09-17T00:56:05.856Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg22005834 https://exchange.xforce.ibmcloud.com/vulnerabilities/128174	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1447`	vulnerable	2026-06-08 05:09:22.174927	Details available IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128172. Published: 2017-08-31T14:00:00.000Z Updated: 2024-09-16T22:21:10.167Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg22005834 https://exchange.xforce.ibmcloud.com/vulnerabilities/128172	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1444`	vulnerable	2026-06-08 05:09:22.152694	Details available IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128110. Published: 2017-08-31T14:00:00.000Z Updated: 2024-09-17T02:46:42.126Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg22005834 https://exchange.xforce.ibmcloud.com/vulnerabilities/128110	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8953`	vulnerable	2026-06-08 05:08:22.281511	Details available IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 118840. Published: 2017-07-12T17:00:00.000Z Updated: 2024-09-16T22:41:20.355Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/118840 http://www.ibm.com/support/docview.wss?uid=swg22005549 http://www.securityfocus.com/bid/99545	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8950`	vulnerable	2026-06-08 05:08:22.270951	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8948`	vulnerable	2026-06-08 05:08:22.235269	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8947`	vulnerable	2026-06-08 05:08:22.231640	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8946`	vulnerable	2026-06-08 05:08:22.227923	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6114`	vulnerable	2026-06-08 05:07:58.925404	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.