SS
Product
Sterling Selling And Fulfillment Foundation
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 1
Watch
Add Sterling Selling And Fulfillment Foundation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-8917 | 8.8 | Mar 31 | IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a… Affected: 9.2.0; 9.2.1; 9.3.0; 9.4.0; 9.5.0 |
| CVE-2016-9991 | 8.0 | Jun 8 | IBM Sterling Order Management 9.2 through 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted… Affected: 9.2.0; 9.2.1; 9.3.0; 9.4.0; 9.5.0 |
| CVE-2016-5953 | 3.7 | Feb 1 | IBM Sterling Order Management transmits the session identifier within the URL Affected: 9.1.0; 9.2.0; 9.2.1; 9.3; 9.4; 9.5 |
| CVE-2015-1911 | – | May 25 | Cross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and Sterling Field Sales… Affected: 9.0 |
| CVE-2014-4807 | – | Nov 23 | Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 9.3.0 before FP8 allows remote authenticated users to cause a denial of service (CPU consumption) via a… Affected: through 9.3.0.7; 9.3.0; 9.3.0.1; 9.3.0.2; 9.3.0.3; 9.3.0.4; +2 more |
| CVE-2014-0932 | – | Apr 21 | Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote… Affected: 9.0 |
| CVE-2013-6322 | – | Nov 28 | Cross-site scripting (XSS) vulnerability in Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 8.0 before HF128 and 8.5 before HF93 allows remote… Affected: 8.0; 8.5 |
| CVE-2013-0578 | – | May 10 | The Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0 before HF128 and IBM Sterling Selling and Fulfillment Foundation 8.5 before HF93, 9.0… Affected: 8.5; 9.0; 9.2.0; 9.2.0.1; 9.2.0.2; 9.2.0.3; +34 more |
| CVE-2013-0506 | – | Mar 19 | Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows… Affected: 8.5; 9.0; 9.1.0; 9.2.0 |
| CVE-2013-0505 | – | Mar 19 | IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath… Affected: 8.5; 9.0; 9.1.0; 9.2.0 |
Showing 10