CVE-2020-4895

MEDIUM 5.4CVE-2020-4895 · Published 07/01/2021 · updated 17/06/2026

In short

CVE-2020-4895 is a MEDIUM (CVSS 5.4) vulnerability affecting emptoris strategic supply management (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 46.9% of all vulnerabilities.
Fix: update to 10.1.0.38, 10.1.1.35, 10.1.3.30 or later.

Package	Affected versions	Patched versions
emptoris strategic supply management ibm	`≥ 10.1.0.0, < 10.1.0.38≥ 10.1.1.0, < 10.1.1.35≥ 10.1.3.0, < 10.1.3.30`	`10.1.0.3810.1.1.3510.1.3.30`

Description

IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190986.

References

exchange.xforce.ibmcloud.com/vulnerabilities/190986 · VDB Entry
ibm.com/support/pages/node/6398286 · Patch

More vulnerabilities in emptoris strategic supply management

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

emptoris strategic supply management

ibm

≥ 10.1.0.0, < 10.1.0.38≥ 10.1.1.0, < 10.1.1.35≥ 10.1.3.0, < 10.1.3.30

10.1.0.3810.1.1.3510.1.3.30

Description

More vulnerabilities in emptoris strategic supply management

See all →