CVE-2017-1440: IBM Emptoris Services Procurement

High severity, CVSS 8.8. EPSS: 3% chance of exploitation in the next 30 days.

IBM Emptoris Services Procurement 10.0.0.5 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a malicious file from a remote system, which could allow the attacker to execute arbitrary code on the vulnerable Web server. IBM X-Force ID: 128105.

Affected products

• IBM Emptoris Services Procurement: version 10.0.0.0 only; version 10.0.0.1 only; version 10.0.0.2 only; version 10.0.0.3 only; version 10.0.0.4 only; version 10.0.0.5 only; …

Published 2017-08-30. Last modified 2026-06-17.