NetSight
IP …
medium6.5

CVE-2014-3041

SQL injection vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 1…

Impact

SQL injection vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected products

VendorProductAffected versions
IbmEmptoris Contract Management
Versions 9.5.0.0, 9.5.0.1, 9.5.0.2, 9.5.0.3, 9.5.0.4, 9.5.0.5

Weakness classification

CWE-89

References