CVE-2014-3041
26.08.2014, 14:55
SQL injection vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
| Vendor | Product | Version |
|---|---|---|
| ibm | emptoris_contract_management | 9.5.0.0 |
| ibm | emptoris_contract_management | 9.5.0.1 |
| ibm | emptoris_contract_management | 9.5.0.2 |
| ibm | emptoris_contract_management | 9.5.0.3 |
| ibm | emptoris_contract_management | 9.5.0.4 |
| ibm | emptoris_contract_management | 9.5.0.5 |
| ibm | emptoris_contract_management | 9.5.0.6 |
| ibm | emptoris_contract_management | 10.0.0.0 |
| ibm | emptoris_contract_management | 10.0.0.1 |
| ibm | emptoris_contract_management | 10.0.1.0 |
| ibm | emptoris_contract_management | 10.0.1.1 |
| ibm | emptoris_contract_management | 10.0.1.2 |
| ibm | emptoris_contract_management | 10.0.1.3 |
| ibm | emptoris_contract_management | 10.0.2.0 |
| ibm | emptoris_contract_management | 10.0.2.1 |
| ibm | emptoris_contract_management | 10.0.2.2 |
𝑥
= Vulnerable software versions
References