CVE-2017-1440
HighSummary
IBM Emptoris Services Procurement version 10.0.0.5 could allow a remote attacker to include arbitrary files. An attacker could send a specially-crafted URL to specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable Web server.
Risk Assessment
The risk to the organization involves the potential for remote code execution, which could lead to server takeover and data leakage.
Recommendation
It is recommended to update to the latest version of the software and implement appropriate security measures to minimize the risk of attacks.
Other vulnerabilities in IBM Emptoris Services Procurement 10.0.0.5
Original NVD description (English source)
IBM Emptoris Services Procurement 10.0.0.5 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 128105.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS