4

CVE-2014-6212

The Echo API in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix11, 10.0.0.x before 10.0.0.1 iFix12, 10.0.1.x before 10.0.1.5 iFix2, and 10.0.2.x before 10.0.2.2 iFix5; Emptoris Sourcing 9.5 before 9.5.1.3 iFix2, 10.0.0.x before 10.0.0.1 iFix1, 10.0.1.x before 10.0.1.3 iFix1, and 10.0.2.x before 10.0.2.5; and Emptoris Program Management (aka PGM) and Strategic Supply Management (aka SSMP) 10.0.0.x before 10.0.0.3 iFix6, 10.0.1.x before 10.0.1.4 iFix1, and 10.0.2.x before 10.0.2.5 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Emptoris Sourcing Portfolio Version 9.5.0.0
Ibm ≫ Emptoris Sourcing Portfolio Version 9.5.0.1
Ibm ≫ Emptoris Sourcing Portfolio Version 9.5.0.2
Ibm ≫ Emptoris Sourcing Portfolio Version 9.5.1.0
Ibm ≫ Emptoris Sourcing Portfolio Version 9.5.1.1
Ibm ≫ Emptoris Sourcing Portfolio Version 9.5.1.2
Ibm ≫ Emptoris Sourcing Portfolio Version 9.5.1.3
Ibm ≫ Emptoris Sourcing Portfolio Version 10.0.0.0
Ibm ≫ Emptoris Sourcing Portfolio Version 10.0.0.1
Ibm ≫ Emptoris Sourcing Portfolio Version 10.0.1.0
Ibm ≫ Emptoris Sourcing Portfolio Version 10.0.1.1
Ibm ≫ Emptoris Sourcing Portfolio Version 10.0.1.2
Ibm ≫ Emptoris Sourcing Portfolio Version 10.0.1.3
Ibm ≫ Emptoris Sourcing Portfolio Version 10.0.2.0
Ibm ≫ Emptoris Sourcing Portfolio Version 10.0.2.2
Ibm ≫ Emptoris Sourcing Portfolio Version 10.0.2.3
Ibm ≫ Emptoris Sourcing Portfolio Version 10.0.2.4
Ibm ≫ Emptoris Program Management Version 10.0.0.0
Ibm ≫ Emptoris Program Management Version 10.0.0.1
Ibm ≫ Emptoris Program Management Version 10.0.0.2
Ibm ≫ Emptoris Program Management Version 10.0.0.3
Ibm ≫ Emptoris Program Management Version 10.0.1.0
Ibm ≫ Emptoris Program Management Version 10.0.1.1
Ibm ≫ Emptoris Program Management Version 10.0.1.2
Ibm ≫ Emptoris Program Management Version 10.0.1.3
Ibm ≫ Emptoris Program Management Version 10.0.1.4
Ibm ≫ Emptoris Program Management Version 10.0.2.0
Ibm ≫ Emptoris Program Management Version 10.0.2.1
Ibm ≫ Emptoris Program Management Version 10.0.2.2
Ibm ≫ Emptoris Program Management Version 10.0.2.3
Ibm ≫ Emptoris Program Management Version 10.0.2.4
Ibm ≫ Emptoris Contract Management Version 9.5.0.0
Ibm ≫ Emptoris Contract Management Version 9.5.0.1
Ibm ≫ Emptoris Contract Management Version 9.5.0.2
Ibm ≫ Emptoris Contract Management Version 9.5.0.3
Ibm ≫ Emptoris Contract Management Version 9.5.0.4
Ibm ≫ Emptoris Contract Management Version 9.5.0.5
Ibm ≫ Emptoris Contract Management Version 9.5.0.6
Ibm ≫ Emptoris Contract Management Version 10.0.0.0
Ibm ≫ Emptoris Contract Management Version 10.0.0.1
Ibm ≫ Emptoris Contract Management Version 10.0.1.0
Ibm ≫ Emptoris Contract Management Version 10.0.1.1
Ibm ≫ Emptoris Contract Management Version 10.0.1.2
Ibm ≫ Emptoris Contract Management Version 10.0.1.3
Ibm ≫ Emptoris Contract Management Version 10.0.1.4
Ibm ≫ Emptoris Contract Management Version 10.0.1.5
Ibm ≫ Emptoris Contract Management Version 10.0.2.0
Ibm ≫ Emptoris Contract Management Version 10.0.2.1
Ibm ≫ Emptoris Contract Management Version 10.0.2.2
Ibm ≫ Emptoris Version strategic_supply_management Update 10.0.0.0
Ibm ≫ Emptoris Version strategic_supply_management Update 10.0.0.1
Ibm ≫ Emptoris Version strategic_supply_management Update 10.0.0.2
Ibm ≫ Emptoris Version strategic_supply_management Update 10.0.0.3
Ibm ≫ Emptoris Version strategic_supply_management Update 10.0.1.0
Ibm ≫ Emptoris Version strategic_supply_management Update 10.0.1.1
Ibm ≫ Emptoris Version strategic_supply_management Update 10.0.1.2
Ibm ≫ Emptoris Version strategic_supply_management Update 10.0.1.3
Ibm ≫ Emptoris Version strategic_supply_management Update 10.0.1.4
Ibm ≫ Emptoris Version strategic_supply_management Update 10.0.2.0
Ibm ≫ Emptoris Version strategic_supply_management Update 10.0.2.1
Ibm ≫ Emptoris Version strategic_supply_management Update 10.0.2.2
Ibm ≫ Emptoris Version strategic_supply_management Update 10.0.2.3
Ibm ≫ Emptoris Version strategic_supply_management Update 10.0.2.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.42% 0.693
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www-01.ibm.com/support/docview.wss?uid=swg21693069
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/98689