CVE-2019-4483

CRITICAL 9.8CVE-2019-4483 · Published 20/08/2019 · updated 17/06/2026

In short

CVE-2019-4483 is a CRITICAL (CVSS 9.8) vulnerability affecting emptoris contract management (ibm), emptoris spend analysis (ibm).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
emptoris contract management ibm	`≥ 10.1.0, ≤ 10.1.3`	No fix yet
emptoris spend analysis ibm	`≥ 10.1.0, ≤ 10.1.3`	No fix yet

Description

IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 164067.

References

exchange.xforce.ibmcloud.com/vulnerabilities/164067 · VDB Entry
ibm.com/support/docview.wss · Vendor Advisory

More vulnerabilities in emptoris contract management

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2019-4483 is a CRITICAL (CVSS 9.8) vulnerability affecting emptoris contract management (ibm), emptoris spend analysis (ibm).

Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.4% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

emptoris contract management

ibm

≥ 10.1.0, ≤ 10.1.3

No fix yet

emptoris spend analysis

ibm

≥ 10.1.0, ≤ 10.1.3

No fix yet

Description

More vulnerabilities in emptoris contract management

See all →