Sterling Selling And Fulfillment Foundation (Ibm) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 82 known versions, newest CVE from 2017-06-08. Vendor: Ibm.
CVEs of Sterling Selling And Fulfillment Foundation
- CVE-2016-9991 - CVSS 8 (high), 2017-06-08: IBM Sterling Order Management 9.2 through 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized…
- CVE-2016-8917 - CVSS 8.8 (high), 2017-03-31: IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized…
- CVE-2016-5953 - CVSS 3.7 (low), 2017-02-01: IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed…
- CVE-2015-1911 - CVSS 4.3 (medium), 2015-05-25: Cross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and…
- CVE-2014-4807 - CVSS 4 (medium), 2014-11-23: Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 9.3.0 before FP8 allows remote authenticated users to cause a denial of service (CPU…
- CVE-2014-0932 - CVSS 3.5 (low), 2014-04-21: Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85…
- CVE-2013-6322 - CVSS 3.5 (low), 2013-11-28: Cross-site scripting (XSS) vulnerability in Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 8.0 before HF128 and 8.5 before HF93…
- CVE-2013-0578 - CVSS 3.5 (low), 2013-05-10: The Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0 before HF128 and IBM Sterling Selling and Fulfillment Foundation 8.5…
- CVE-2013-0506 - CVSS 4.3 (medium), 2013-03-19: Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0…
- CVE-2013-0505 - CVSS 5.5 (medium), 2013-03-19: IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users…