CVE-2020-4896: IBM Emptoris Sourcing

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 190987.

Affected products

• IBM Emptoris Sourcing: from 10.1.0.0, before 10.1.0.38 (fixed in 10.1.0.38); from 10.1.1.0, before 10.1.1.35 (fixed in 10.1.1.35); from 10.1.3.0, before 10.1.3.30 (fixed in 10.1.3.30)

Published 2021-01-07. Last modified 2026-06-17.