Emptoris Program Management

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-4971 LOW PATCH Monitor

Cross-site scripting (XSS) vulnerability in IBM Emptoris Strategic Supply Management Platform and Emptoris Program Management 10.x before 10.0.1.4_iFix3, 10.0.2.x before 10.0.2.7_iFix1, 10.0.3.x. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable.

IBM XSS Emptoris Emptoris Program Management

NVD

CVSS 2.0

3.5

EPSS

0.2%

CVE-2015-4939 MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in IBM Emptoris Supplier Lifecycle Management and Emptoris Program Management 10.x before 10.0.1.4_iFix3, 10.0.2.x before 10.0.2.7_iFix1, 10.0.3.x before. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

IBM XSS Emptoris Program Management Emptoris Supplier Lifecycle Management Emptoris Strategic Supply Management

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2014-6212 MEDIUM PATCH This Month

The Echo API in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix11, 10.0.0.x before 10.0.0.1 iFix12, 10.0.1.x before 10.0.1.5 iFix2, and 10.0.2.x before 10.0.2.2 iFix5; Emptoris Sourcing. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity.

IBM XXE Emptoris Sourcing Portfolio Emptoris Program Management Emptoris Contract Management +1

NVD

CVSS 2.0

4.0

EPSS

0.2%

CVE-2015-4971

EPSS 0% CVSS 3.5

LOW PATCH Monitor

IBM XSS Emptoris +1

NVD

CVE-2015-4939

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

IBM XSS Emptoris Program Management +2

NVD

CVE-2014-6212

EPSS 0% CVSS 4.0

MEDIUM PATCH This Month

IBM XXE Emptoris Sourcing Portfolio +3

NVD