Sterling Order Management (Ibm) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 11 known versions, newest CVE from 2023-04-07. Vendor: Ibm.

CVEs of Sterling Order Management

• CVE-2022-33959 - CVSS 8.1 (high), 2023-04-07: IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of other users. IBM X-Force ID: 229320.
• CVE-2022-34333 - CVSS 7.5 (high), 2023-04-07: IBM Sterling Order Management 10.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user…
• CVE-2021-20554 - CVSS 6.1 (medium), 2021-09-30: IBM Sterling Order Management 9.4, 9.5, and 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
• CVE-2016-9991 - CVSS 8 (high), 2017-06-08: IBM Sterling Order Management 9.2 through 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized…
• CVE-2015-1911 - CVSS 4.3 (medium), 2015-05-25: Cross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and…
• CVE-2014-0932 - CVSS 3.5 (low), 2014-04-21: Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85…