Medium severity5.9NVD Advisory· Published Jan 7, 2021· Updated Jun 17, 2026
CVE-2020-4893
CVE-2020-4893
Description
IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters. This may lead to information disclosure via man in the middle methods. IBM X-Force ID: 190984.
Affected products
3cpe:2.3:a:ibm:emptoris_strategic_supply_management:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:emptoris_strategic_supply_management:*:*:*:*:*:*:*:*range: >=10.1.0.0,<10.1.0.38
- (no CPE)range: 10.1.0, 10.1.1, 10.1.3
- (no CPE)range: 10.1.0
Patches
Vulnerability mechanics
References
2- www.ibm.com/support/pages/node/6398282nvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/190984nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.