CVE-2020-4896

—

CVSS 3.1

6.5 medium

EPSS

<1%p55

Published

Jan 7, 2021 (Jan 7, 2021)

Modified

Jun 17, 2026

Description

IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 190987.

Vendors: ibm
Products: emptoris sourcing
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.