IBM Security Bulletin: Multiple vulnerabilities addressed in IBM Emptoris Strategic Supply Management (CVE-2016-6019, CVE-2016-8951, CVE-2016-8952 )

IBM Emptoris Strategic Supply Management is vulnerable to Cross-Site Scripting, Denial of service attack due to flaw in handling of untrusted user input.

CVE(s): CVE-2016-6019, CVE-2016-8951, CVE-2016-8952

Affected product(s) and affected version(s):

IBM Emptoris Strategic Supply Management 10.0.0.x through 10.1.1.x

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2vcGAMr
X-Force Database: http://ift.tt/2ueePWE
X-Force Database: http://ift.tt/2vcj0zx
X-Force Database: http://ift.tt/2uedmzx

The post IBM Security Bulletin: Multiple vulnerabilities addressed in IBM Emptoris Strategic Supply Management (CVE-2016-6019, CVE-2016-8951, CVE-2016-8952 ) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team http://ift.tt/2vclKwF