CVE-2016-6018
MEDIUMIBM Emptoris Contract Management <10.2 - Info Disclosure
Title source: llmDescription
IBM Emptoris Contract Management 10.0 and 10.1 reveals detailed error messages in certain features that could cause an attacker to gain additional information to conduct further attacks. IBM X-Force ID: 116738.
Scores
CVSS v3
4.3
EPSS
0.0021
EPSS Percentile
43.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (32)
ibm/emptoris_contract_management
ibm/emptoris_contract_management
ibm/emptoris_contract_management
ibm/emptoris_contract_management
ibm/emptoris_contract_management
ibm/emptoris_contract_management
ibm/emptoris_contract_management
ibm/emptoris_contract_management
ibm/emptoris_contract_management
ibm/emptoris_contract_management
... and 22 more
Published
Jul 19, 2017
Tracked Since
Feb 18, 2026