CVE-2017-1097

High

Published: 05/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Emptoris Strategic Supply Management Platform versions 10.0.0.x through 10.1.1.x is vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions transmitted from a trusted user.

Risk Assessment

An attacker could exploit this vulnerability to perform unauthorized operations on behalf of users, potentially leading to serious data security breaches.

Recommendation

It is recommended to update the platform to the latest version to minimize the risk associated with this vulnerability and to implement additional security mechanisms against CSRF attacks.

Other vulnerabilities in IBM Emptoris Strategic Supply Management Platform

CVE-2016-8951High
IBM Emptoris Strategic Supply Management Platform versions 10.0.0.x through 10.1.1.x is vulnerable to a denial of service attack. An attacker can exploit a vulnerability in the authentication features that could log out users and flood user accounts with emails.

Original NVD description (English source)

IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 120657.