Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190979.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Emptoris Contract Management 跨站脚本漏洞
Vulnerability Description
IBM Emptoris Contract Management是美国IBM公司的一套可实现合同生命周期自动化的软件。该软件可以自动执行和管理合同生命周期的各个阶段，如从合同及修正案的创建、执行和再协商，到绩效监控、分析和续订。 IBM Emptoris Contract Management 10.1.3 存在跨站脚本漏洞，该漏洞容易受到跨站点脚本攻击。此漏洞允许用户在Web UI中嵌入任意JavaScript代码，从而更改预期的功能，从而可能导致可信会话中的凭证公开。
CVSS Information
N/A
Vulnerability Type
N/A