Unscored severity · published May 10, 2013
CVE-2013-0578
The Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0 before HF128 and IBM Sterling Selling and Fulfillment Foundation 8.5 before HF93, 9.0…
–
CVSS
1.4%
EPSS
No
On KEV
Description
The Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0 before HF128 and IBM Sterling Selling and Fulfillment Foundation 8.5 before HF93, 9.0 before HF73, 9.1.0 before FP45, and 9.2.0 before FP17, when the API tester is enabled, do not require administrative credentials, which allows remote authenticated users to obtain sensitive database information via a request to the API tester URI.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SM
Sterling Multi-channel Fulfillment Solution · Ibm
8.0 · source: NVD
SS
Sterling Selling And Fulfillment Foundation · Ibm
8.5; 9.0; 9.2.0; 9.2.0.1; 9.2.0.2; 9.2.0.3; +34 more · source: NVD
Affected product
SM
Sterling Multi-channel Fulfillment Solution
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-0578
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-0578
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IC91829
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21636034
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/83330
More from Sterling Multi-channel Fulfillment Solution
–
CVE-2013-0506
Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows…
–
CVE-2013-0505
IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath…