Unscored severity · published Apr 21, 2014
CVE-2014-0932
Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SO
Sterling Order Management · Ibm
8.5 · source: NVD
SS
Sterling Selling And Fulfillment Foundation · Ibm
9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0932
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0932
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IT00419
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21670912
www.securityfocus.com
http://www.securityfocus.com/bid/66993
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/92264
More from Sterling Order Management
8.1
CVE-2022-33959
IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of other users
7.5
CVE-2022-34333
IBM Sterling Order Management 10.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts
6.1
CVE-2021-20554
IBM Sterling Order Management 9.4, 9.5, and 10.0 is vulnerable to cross-site scripting
–
CVE-2015-1911
Cross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and Sterling Field Sales…