NetSight
medium6.5

CVE-2020-4896

IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers.

Impact

IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 190987.

Affected products

VendorProductAffected versions
IbmEmptoris Sourcing
from 10.1.0.0 before 10.1.0.38
from 10.1.1.0 before 10.1.1.35
from 10.1.3.0 before 10.1.3.30

Weakness classification

References