SO
Product
Sterling Order Management
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 1
Watch
Add Sterling Order Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-8917 | 8.8 | Mar 31 | IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a… Affected: 8.5; 8.0; 9.1; 9.2; 9.2.1; 9.3; +2 more |
| CVE-2016-5953 | 3.7 | Feb 1 | IBM Sterling Order Management transmits the session identifier within the URL Affected: 8.5; 8.0; 9.1; 9.2; 9.2.1; 9.3; +2 more |
Showing 2
