CVE-2014-3061

Published: Aug 26, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in IBM Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Affected (9)

Products: Ibm: Emptoris Spend Analysis

Ibm

1 product

Emptoris Spend Analysis

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Emptoris Spend Analysis	Version 10.0.1.0
Ibm Emptoris Spend Analysis	Version 10.0.1.1
Ibm Emptoris Spend Analysis	Version 10.0.1.2
Ibm Emptoris Spend Analysis	Version 10.0.2.0
Ibm Emptoris Spend Analysis	Version 10.0.2.2
Ibm Emptoris Spend Analysis	Version 9.5.0.0
Ibm Emptoris Spend Analysis	Version 9.5.0.1
Ibm Emptoris Spend Analysis	Version 9.5.0.2
Ibm Emptoris Spend Analysis	Version 9.5.0.3