| Package | Affected versions | Patched versions |
|---|---|---|
| emptoris strategic supply management | = 10.0.0.0= 10.0.0.1= 10.0.0.2= 10.0.0.3= 10.0.1.0= 10.0.1.1= 10.0.1.2= 10.0.1.3= 10.0.1.4= 10.0.2.0= 10.0.2.1= 10.0.2.10= 10.0.2.11= 10.0.2.12= 10.0.2.13= 10.0.2.14= 10.0.2.15= 10.0.2.16= 10.0.2.17= 10.0.2.2= 10.0.2.3= 10.0.2.4= 10.0.2.5= 10.0.2.6= 10.0.2.7= 10.0.2.8= 10.0.2.9= 10.0.4.0= 10.1.0.0= 10.1.0.1= 10.1.0.10= 10.1.0.11= 10.1.0.2= 10.1.0.3= 10.1.0.4= 10.1.0.5= 10.1.0.6= 10.1.0.7= 10.1.0.8= 10.1.0.9= 10.1.1.0= 10.1.1.1= 10.1.1.10= 10.1.1.2= 10.1.1.3= 10.1.1.4= 10.1.1.5= 10.1.1.6= 10.1.1.7= 10.1.1.8= 10.1.1.9 | |
| emptoris supplier lifecycle management | = 10.0.0.0= 10.0.0.1= 10.0.0.2= 10.0.0.3= 10.0.1.0= 10.0.1.1= 10.0.1.2= 10.0.2.0= 10.0.2.2= 10.0.2.3= 10.0.2.5= 10.0.2.6= 10.0.2.7 |
IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118383.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free