Emptoris Sourcing
Vendor:
First CVE: Oct 6, 2015 · Active for 10 years
16
Total CVEs
More Total CVEs than 93% of tracked products
3.2
Avg CVEs / Year
Higher CVE frequency than 84% of tracked products
5.3
Avg CVSS
Higher Avg CVSS than 12% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Emptoris Sourcing over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 6, 2015
10 years ago
Most Recent CVE
Jan 7, 2021
2,028 days ago
CVE Severity & Scoring
Emptoris Sourcing16 CVEs
100%
All CVEs353,240 CVEs
45%
40%
11%
Medium
Attack Vector
Local0 (0.0%)
Network15 (93.8%)
Unknown1 (6.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low15 (93.8%)
High0 (0.0%)
Unknown1 (6.3%)
User Interaction
None4 (25.0%)
Unknown1 (6.3%)
Required11 (68.8%)
Privileges Required
Low11 (68.8%)
High0 (0.0%)
None4 (25.0%)
Unknown1 (6.3%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-1450MEDIUM IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web | Aug 31, 2017 | 6.1 | 21 | NO | NO |
CVE-2017-1447MEDIUM IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intende | Aug 31, 2017 | 5.4 | 20 | NO | NO |
CVE-2016-6114MEDIUM IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the | Jul 12, 2017 | 5.4 | 20 | NO | NO |
CVE-2017-1449MEDIUM IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web | Aug 31, 2017 | 5.4 | 19 | NO | NO |
CVE-2017-1444MEDIUM IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intende | Aug 31, 2017 | 5.4 | 19 | NO | NO |
CVE-2019-4484MEDIUM IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that in | Aug 20, 2019 | 4.3 | 18 | NO | NO |
CVE-2019-4308MEDIUM IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 could allow an authenticated user | Aug 20, 2019 | 4.3 | 18 | NO | NO |
CVE-2020-4896MEDIUM IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 190987 | Jan 7, 2021 | 6.5 | 17 | NO | NO |
CVE-2019-4485MEDIUM IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that in | Aug 20, 2019 | 4.3 | 17 | NO | NO |
CVE-2016-8948MEDIUM IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the | Jul 12, 2017 | 5.4 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Emptoris Sourcing
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.5.1.3 | 8 | 5.6 | 0.7% | 0 | 0 |
| 9.5.1.2 | 8 | 5.6 | 0.7% | 0 | 0 |
| 9.5.1.1 | 8 | 5.6 | 0.7% | 0 | 0 |
| 9.5.1.0 | 4 | 5.6 | 0.6% | 0 | 0 |
| 9.5.0.2 | 4 | 5.6 | 0.6% | 0 | 0 |
| 9.5.0.1 | 8 | 5.6 | 0.7% | 0 | 0 |
| 9.5 | 10 | 5.5 | 0.7% | 0 | 0 |
| 10.1.3 | 4 | 5.6 | 0.6% | 0 | 0 |
| 10.1.1 | 10 | 5.5 | 0.7% | 0 | 0 |
| 10.1.0 | 10 | 5.5 | 0.7% | 0 | 0 |
| 10.0.4.0 | 1 | 4.0 | 1.0% | 0 | 0 |
| 10.0.4 | 10 | 5.5 | 0.7% | 0 | 0 |
| 10.0.2.7 | 1 | 4.0 | 1.0% | 0 | 0 |
| 10.0.2.6 | 1 | 4.0 | 1.0% | 0 | 0 |
| 10.0.2.5 | 1 | 4.0 | 1.0% | 0 | 0 |
| 10.0.2.3 | 1 | 4.0 | 1.0% | 0 | 0 |
| 10.0.2.2 | 1 | 4.0 | 1.0% | 0 | 0 |
| 10.0.2.0 | 1 | 4.0 | 1.0% | 0 | 0 |
| 10.0.2 | 10 | 5.5 | 0.7% | 0 | 0 |
| 10.0.1 | 10 | 5.5 | 0.7% | 0 | 0 |