Login Request a demo
SO
Product
Sterling Order Management
by Ibm · last CVE Apr 7, 2023
5
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities5Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sterling Order Management to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-33959
8.1
0%
Apr 7
IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of other users
Affected: 10
CVE-2022-34333
7.5
1%
Apr 7
IBM Sterling Order Management 10.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts
Affected: 10
CVE-2021-20554
6.1
1%
Sep 30
IBM Sterling Order Management 9.4, 9.5, and 10.0 is vulnerable to cross-site scripting
Affected: 9.4.0; 9.5.0; 10
CVE-2015-1911
–
1%
May 25
Cross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and Sterling Field Sales…
Affected: 8.5
CVE-2014-0932
–
1%
Apr 21
Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote…
Affected: 8.5
Showing 5