VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Aug 20, 2019· Updated Jun 17, 2026

CVE-2019-4308

CVE-2019-4308

Description

IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 could allow an authenticated user to obtain sensitive information from error messages IBM X-Force ID: 161034.

Affected products

9
  • IBM/Emptoris Contract Management2 versions
    cpe:2.3:a:ibm:emptoris_contract_management:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:emptoris_contract_management:*:*:*:*:*:*:*:*range: >=10.1.0,<=10.1.3
    • (no CPE)range: 10.1.0
  • IBM/Emptoris Sourcing3 versions
    cpe:2.3:a:ibm:emptoris_sourcing:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:emptoris_sourcing:*:*:*:*:*:*:*:*range: >=10.1.0,<=10.1.3
    • (no CPE)range: 10.1.0 - 10.1.3
    • (no CPE)range: 10.1.0
  • IBM/Emptoris Spend Analysis3 versions
    cpe:2.3:a:ibm:emptoris_spend_analysis:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:emptoris_spend_analysis:*:*:*:*:*:*:*:*range: >=10.1.0,<=10.1.3
    • (no CPE)range: 10.1.0 - 10.1.3
    • (no CPE)range: 10.1.0
  • IBM/Contract Managementllm-fuzzy
    Range: 10.1.0 - 10.1.3

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.