cbcvebase.
CVE-2014-3041
published 2014-08-26

CVE-2014-3041: SQL injection vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and…

PriorityP336medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EPSS
1.03%
59.8th percentile
SQL injection vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFix 2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Affected

16 ranges
VendorProductVersion rangeFixed in
ibmemptoris_contract_management——
ibmemptoris_contract_management——
ibmemptoris_contract_management——
ibmemptoris_contract_management——
ibmemptoris_contract_management——
ibmemptoris_contract_management——
ibmemptoris_contract_management——
ibmemptoris_contract_management——
ibmemptoris_contract_management——
ibmemptoris_contract_management——
ibmemptoris_contract_management——
ibmemptoris_contract_management——
ibmemptoris_contract_management——
ibmemptoris_contract_management——
ibmemptoris_contract_management——
ibmemptoris_contract_management——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.