CVE-2017-1440

Published: Aug 30, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

IBM Emptoris Services Procurement 10.0.0.5 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 128105.

Affected (7)

Products: Ibm: Emptoris Services Procurement

Ibm

1 product

Emptoris Services Procurement

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Emptoris Services Procurement	Version 10.0.0.0
Ibm Emptoris Services Procurement	Version 10.0.0.1
Ibm Emptoris Services Procurement	Version 10.0.0.2
Ibm Emptoris Services Procurement	Version 10.0.0.3
Ibm Emptoris Services Procurement	Version 10.0.0.4
Ibm Emptoris Services Procurement	Version 10.0.0.5
Ibm Emptoris Services Procurement	Version 10.1.1.0