Unrated severityNVD Advisory· Published Aug 20, 2019· Updated Sep 17, 2024

CVE-2019-4308

Description

IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 could allow an authenticated user to obtain sensitive information from error messages IBM X-Force ID: 161034.

Affected products

IBM/Emptoris Contract Managementllm-fuzzy2 versions
10.1.0 - 10.1.3+ 1 more
- (no CPE)range: 10.1.0 - 10.1.3
- (no CPE)range: 10.1.0
IBM/Emptoris Spend Analysisllm-fuzzy2 versions
10.1.0 - 10.1.3+ 1 more
- (no CPE)range: 10.1.0 - 10.1.3
- (no CPE)range: 10.1.0
IBM/Emptoris Sourcingllm-fuzzy2 versions
10.1.0 - 10.1.3+ 1 more
- (no CPE)range: 10.1.0 - 10.1.3
- (no CPE)range: 10.1.0

Patches

Vulnerability mechanics

References

exchange.xforce.ibmcloud.com/vulnerabilities/161034mitrevdb-entryx_refsource_XF
www.ibm.com/support/docview.wssmitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000