Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Emptoris Contract Management SQL注入漏洞
Vulnerability Description
IBM Emptoris Contract Management是美国IBM公司的一套可实现合同生命周期自动化的软件。该软件可以自动执行和管理合同生命周期的各个阶段，如从合同及修正案的创建、执行和再协商，到绩效监控、分析和续订。 IBM Emptoris Contract Management中存在SQL注入漏洞，该漏洞源于程序没有充分过滤用户提交的输入。远程攻击者可利用该漏洞执行任意SQL命令。以下版本受到影响：IBM Emptoris Contract Management 9.5.0.6之前9.5.
CVSS Information
N/A
Vulnerability Type
N/A