high8.8
CVE-2019-4752
IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is vulnerable to SQL injection.
Impact
IBM Emptoris Spend Analysis and IBM Emptoris Strategic Supply Management Platform 10.1.0.x, 10.1.1.x, and 10.1.3.x is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 173348.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Emptoris Spend Analysis | from 10.1.0.0 before 10.1.0.34 from 10.1.1.0 before 10.1.1.33 from 10.1.3.0 before 10.1.3.29 |
| Ibm | Emptoris Strategic Supply Management Platform | from 10.1.0.0 before 10.1.0.34 from 10.1.1.0 before 10.1.1.33 from 10.1.3.0 before 10.1.3.29 |
Weakness classification
References
- NVD record
- CVE.org record
- https://exchange.xforce.ibmcloud.com/vulnerabilities/173348
- https://www.ibm.com/support/pages/node/2948919
- https://www.ibm.com/support/pages/node/2950269
- https://exchange.xforce.ibmcloud.com/vulnerabilities/173348
- https://www.ibm.com/support/pages/node/2948919
- https://www.ibm.com/support/pages/node/2950269