Lucene search
IbmCVE-2015-5024HistoryOct 06, 2015 - 1:59 a.m.
CVE-2015-5024
2015-10-0601:59:17
CWE-200
ibm
web.nvd.nist.gov
19
ibm
emptoris
sourcing
ifix
vulnerability
cve-2015-5024
nvd
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
8.3
Confidence
Low
EPSS
0.001
Percentile
34.2%
IBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before iFix4, 10.0.2.6 before iFix8, 10.0.2.7 before iFix1, and 10.0.4.x before iFix2 allows remote authenticated users to obtain sensitive supplier-bid information via unspecified vectors.
Affected configurations
Node
ibmemptoris_sourcingMatch10.0.2.0
ORibmemptoris_sourcingMatch10.0.2.2
ORibmemptoris_sourcingMatch10.0.2.3
ORibmemptoris_sourcingMatch10.0.2.5
ORibmemptoris_sourcingMatch10.0.2.6
ORibmemptoris_sourcingMatch10.0.2.7
ORibmemptoris_sourcingMatch10.0.4.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | emptoris_sourcing | 10.0.2.0 | cpe:2.3:a:ibm:emptoris_sourcing:10.0.2.0:*:*:*:*:*:*:* |
| ibm | emptoris_sourcing | 10.0.2.2 | cpe:2.3:a:ibm:emptoris_sourcing:10.0.2.2:*:*:*:*:*:*:* |
| ibm | emptoris_sourcing | 10.0.2.3 | cpe:2.3:a:ibm:emptoris_sourcing:10.0.2.3:*:*:*:*:*:*:* |
| ibm | emptoris_sourcing | 10.0.2.5 | cpe:2.3:a:ibm:emptoris_sourcing:10.0.2.5:*:*:*:*:*:*:* |
| ibm | emptoris_sourcing | 10.0.2.6 | cpe:2.3:a:ibm:emptoris_sourcing:10.0.2.6:*:*:*:*:*:*:* |
| ibm | emptoris_sourcing | 10.0.2.7 | cpe:2.3:a:ibm:emptoris_sourcing:10.0.2.7:*:*:*:*:*:*:* |
| ibm | emptoris_sourcing | 10.0.4.0 | cpe:2.3:a:ibm:emptoris_sourcing:10.0.4.0:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2015-10-06 01:59:00
cvelist
cvelist
CVE-2015-5024
2015-10-05 10:00:00
nvd
nvd
CVE-2015-5024
2015-10-06 01:59:17
ibm
ibm
Security Bulletins for Emptoris Sourcing
2018-12-08 15:10:02
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
8.3
Confidence
Low
EPSS
0.001
Percentile
34.2%
Related for CVE-2015-5024