| Package | Affected versions | Patched versions |
|---|---|---|
| emptoris strategic supply management | = 10.0.0.0= 10.0.0.1= 10.0.0.2= 10.0.0.3= 10.0.1.0= 10.0.1.1= 10.0.1.2= 10.0.1.3= 10.0.1.4= 10.0.2.0= 10.0.2.1= 10.0.2.10= 10.0.2.11= 10.0.2.12= 10.0.2.13= 10.0.2.14= 10.0.2.15= 10.0.2.16= 10.0.2.17= 10.0.2.2= 10.0.2.3= 10.0.2.4= 10.0.2.5= 10.0.2.6= 10.0.2.7= 10.0.2.8= 10.0.2.9= 10.0.4.0= 10.1.0.0= 10.1.0.1= 10.1.0.10= 10.1.0.11= 10.1.0.2= 10.1.0.3= 10.1.0.4= 10.1.0.5= 10.1.0.6= 10.1.0.7= 10.1.0.8= 10.1.0.9= 10.1.1.0= 10.1.1.1= 10.1.1.10= 10.1.1.2= 10.1.1.3= 10.1.1.4= 10.1.1.5= 10.1.1.6= 10.1.1.7= 10.1.1.8= 10.1.1.9 | |
| emptoris supplier lifecycle management | = 10.0.0.0= 10.0.0.1= 10.0.0.2= 10.0.0.3= 10.0.1.0= 10.0.1.1= 10.0.1.2= 10.0.2.0= 10.0.2.2= 10.0.2.3= 10.0.2.5= 10.0.2.6= 10.0.2.7 |
IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 128173.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free