CVE-2016-6029
MEDIUMIBM Emptoris Strategic Supply Management Platform <10.1 - Info Disc...
Title source: llmDescription
IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 116881.
Scores
CVSS v3
5.9
EPSS
0.0020
EPSS Percentile
42.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (50)
ibm/emptoris_strategic_supply_management
ibm/emptoris_strategic_supply_management
ibm/emptoris_strategic_supply_management
ibm/emptoris_strategic_supply_management
ibm/emptoris_strategic_supply_management
ibm/emptoris_strategic_supply_management
ibm/emptoris_strategic_supply_management
ibm/emptoris_strategic_supply_management
ibm/emptoris_strategic_supply_management
ibm/emptoris_strategic_supply_management
... and 40 more
Published
Aug 14, 2017
Tracked Since
Feb 18, 2026