Unscored severity · published Nov 28, 2013
CVE-2013-6322
Cross-site scripting (XSS) vulnerability in Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 8.0 before HF128 and 8.5 before HF93 allows remote…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 8.0 before HF128 and 8.5 before HF93 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Sterling Selling And Fulfillment Foundation · Ibm
8.0; 8.5 · source: NVD
Affected product
SS
Sterling Selling And Fulfillment Foundation
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-6322
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-6322
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IC97745
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21656906
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/88902
More from Sterling Selling And Fulfillment Foundation
8.8
CVE-2016-8917
IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a…
8.0
CVE-2016-9991
IBM Sterling Order Management 9.2 through 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted…
3.7
CVE-2016-5953
IBM Sterling Order Management transmits the session identifier within the URL
–
CVE-2015-1911
Cross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and Sterling Field Sales…
–
CVE-2014-4807
Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 9.3.0 before FP8 allows remote authenticated users to cause a denial of service (CPU consumption) via a…