CVE-2020-4893
published 2021-01-07CVE-2020-4893: IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters. This may lead to…
PriorityP428medium5.9CVSS 3.1
AVNACHPRNUINSUCHINAN
EPSS
0.65%
46.8th percentile
IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters. This may lead to information disclosure via man in the middle methods. IBM X-Force ID: 190984.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | emptoris_strategic_supply_management | — | — |
| ibm | emptoris_strategic_supply_management | — | — |
| ibm | emptoris_strategic_supply_management | — | — |
| ibm | emptoris_strategic_supply_management | >= 10.1.0.0 < 10.1.0.38 | 10.1.0.38 |
| ibm | emptoris_strategic_supply_management | >= 10.1.1.0 < 10.1.1.35 | 10.1.1.35 |
| ibm | emptoris_strategic_supply_management | >= 10.1.3.0 < 10.1.3.30 | 10.1.3.30 |
| juniper | junos_os | — | — |
CVSS provenance
nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv3.05.9MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jf7p-v9hx-5vrc: IBM Emptoris Strategic Supply Management 10
ghsa_unreviewed·2022-05-24
CVE-2020-4893 [MEDIUM] CWE-319 GHSA-jf7p-v9hx-5vrc: IBM Emptoris Strategic Supply Management 10
IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters. This may lead to information disclosure via man in the middle methods. IBM X-Force ID: 190984.
Juniper
CVE-2020-1632: In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an in
vendor_juniper·2020-04-15·CVSS 8.6
CVE-2020-1632 [HIGH] CWE-755 CVE-2020-1632: In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an in
CVE-2020-1632: In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing the other peers to terminate the established BGP session, creating a Denial of Service (DoS) condition. For example, Router A sends a specific BGP UPDATE to Router B, causing Router B to send an invalid BGP UPDATE message to Router C, resulting in termination of the BGP session between Router B and Router C. This issue might occur when there is at least a single BGP session established on the device that does not support 4 Byte AS extension (RFC 4893). Repeated receipt of the same BGP UPDATE can result in an extended DoS condition. This issue affects Juniper Networks Junos OS: 16
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-01-07
Published