critical9.8
CVE-2019-4481
IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection.
Impact
IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 164064.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Emptoris Contract Management | from 10.1.0 through 10.1.3 |
| Ibm | Emptoris Spend Analysis | from 10.1.0 through 10.1.3 |