What’s Vulnerable › Vulnerabilities

CVE-2015-5024

• Severity: medium (CVSS 4.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-10-06 · updated 2026-06-17
• Weakness: CWE-200

Description

IBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before iFix4, 10.0.2.6 before iFix8, 10.0.2.7 before iFix1, and 10.0.4.x before iFix2 allows remote authenticated users to obtain sensitive supplier-bid information via unspecified vectors.

Affected products

• IBM Emptoris Sourcing: 10.0.2.0, 10.0.2.2, 10.0.2.3, 10.0.2.5, 10.0.2.6, 10.0.2.7 (+1)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21967255
• http://www-01.ibm.com/support/docview.wss?uid=swg21967255

Get alerted when CVE-2015-5024 or the next vulnerability affects your stack