Skip to content
OpenAdvisories
Unscored CVE-2016-6118 EUVD-2016-7052GHSA-h6hp-6f2w-j4p3

IBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…

Published Jul 24, 2017 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Emptoris Supplier Lifecycle Management

Description

IBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 118356.

Affected products

VendorProductAffectedFixed
IBM Emptoris Supplier Lifecycle Management 10.1.0.0 —

References