CVE-2016-6029

CVE-2016-6029: vulnerability in IBM Emptoris Strategic Supply Management

Published · Updated

Follow this CVE+ Monitor Emptoris Strategic Supply Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 116881.
Affected products
IBM · Emptoris Strategic Supply Management
Related CVEs — IBM Emptoris Strategic Supply Management

In the same product, most dangerous first.

CVE-2016-8951—CVE-2016-8951EPSS 2.9%CVE-2019-4752HIGHCVE-2019-4752EPSS 1.3%CVE-2020-4898MEDIUMCVE-2020-4898EPSS 0.8%CVE-2016-6019—CVE-2016-6019EPSS 0.7%CVE-2016-8952—CVE-2016-8952EPSS 0.7%CVE-2020-4893MEDIUMCVE-2020-4893EPSS 0.7%