Vulnerabilities

TI-2016-08093 CVE-2016-9991 · GHSA-2f4x-947v-p53c

Cross-site request forgery in IBM Sterling Order Management

LOW 36

IBM Sterling Order Management 9.2 through 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.00556 Published 2017-06-08 No fix listed CWE-352

TI-2016-07314 CVE-2016-8917 · GHSA-8wp9-rrxh-9hpq

Cross-site request forgery in IBM Sterling Order Management

LOW 39

IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00554 Published 2017-03-31 No fix listed CWE-352

TI-2016-05143 CVE-2016-5953 · GHSA-9p3j-j69q-f44j

Information disclosure in IBM Sterling Order Management

LOW 19

IBM Sterling Order Management transmits the session identifier within the URL.

CVSS 3.0LOW 3.7 Network No auth No interaction EPSS 0.00842 Published 2017-02-01 No fix listed CWE-200

TI-2015-01718 CVE-2015-1911 · GHSA-cvp6-388r-8j4x

Cross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113…

LOW 22

Cross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and Sterling Field Sales (SFS) 9.0 before HF7 in IBM Sterling Selling…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00931 Published 2015-05-25 No fix listed CWE-79

TI-2014-03947 CVE-2014-4807 · GHSA-mqfg-r4mp-f7xf

Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 9.3.0 before FP8…

LOW 21

Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 9.3.0 before FP8 allows remote authenticated users to cause a denial of service (CPU consumption) via a '\0' character.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.0124 Published 2014-11-23 No fix listed CWE-399

TI-2014-00858 CVE-2014-0932 · GHSA-jh94-982g-fwfh

Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before…

LOW 19

Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote authenticated users to inject arbitrary web script…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00946 Published 2014-04-21 No fix listed CWE-79

TI-2013-05292 CVE-2013-6322 · GHSA-5vmf-p269-q8w4

Cross-site scripting (XSS) vulnerability in Sterling Order Management in IBM Sterling…

LOW 19

Cross-site scripting (XSS) vulnerability in Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 8.0 before HF128 and 8.5 before HF93 allows remote authenticated users to inject arbitrary web script or…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00936 Published 2013-11-28 No fix listed CWE-79

TI-2013-00474 CVE-2013-0578 · GHSA-7pjw-c9w7-9xgf

The Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0…

LOW 20

The Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0 before HF128 and IBM Sterling Selling and Fulfillment Foundation 8.5 before HF93, 9.0 before HF73, 9.1.0 before FP45, and 9.2.0 be…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01351 Published 2013-05-10 No fix listed CWE-287

TI-2013-00425 CVE-2013-0506 · GHSA-mg68-f2m7-jfrv

Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.0 before…

LOW 22

Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to inject arbitrary…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2013-03-19 No fix listed CWE-79

TI-2013-00424 CVE-2013-0505 · GHSA-9789-3997-xv2g

IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0…

LOW 27

IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML file…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01074 Published 2013-03-19 No fix listed CWE-20

Vulnerabilities

Filters