CVE-2016-8951

High

Published: 13/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Emptoris Strategic Supply Management Platform versions 10.0.0.x through 10.1.1.x is vulnerable to a denial of service attack. An attacker can exploit a vulnerability in the authentication features that could log out users and flood user accounts with emails.

Risk Assessment

The risk to the organization includes the potential for user logout and disruption of their work due to excessive email flooding, which may lead to loss of access to the system.

Recommendation

It is recommended to update the platform to the latest version to patch this vulnerability and to monitor user activity for potential attacks.

Other vulnerabilities in IBM Emptoris Strategic Supply Management Platform

CVE-2017-1097High
IBM Emptoris Strategic Supply Management Platform versions 10.0.0.x through 10.1.1.x is vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions transmitted from a trusted user.

Original NVD description (English source)

IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to a denial of service attack. An attacker can exploit a vulnerability in the authentication features that could log out users and flood user accounts with emails. IBM X-Force ID: 118838.