Sterling Multi Channel Fulfillment Solution

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-0578 LOW Monitor

The Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0 before HF128 and IBM Sterling Selling and Fulfillment Foundation 8.5 before HF93, 9.0 before HF73, 9.1.0. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.

IBM Authentication Bypass Sterling Multi Channel Fulfillment Solution Sterling Selling And Fulfillment Foundation

NVD

CVSS 2.0

3.5

EPSS

0.2%

CVE-2013-0506 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

IBM XSS Sterling Multi Channel Fulfillment Solution Sterling Selling And Fulfillment Foundation

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2013-0505 MEDIUM This Month

IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Code Injection IBM Sterling Multi Channel Fulfillment Solution Sterling Selling And Fulfillment Foundation

NVD

CVSS 2.0

5.5

EPSS

0.2%

CVE-2013-0578

EPSS 0% CVSS 3.5

LOW Monitor

IBM Authentication Bypass Sterling Multi Channel Fulfillment Solution +1

NVD

CVE-2013-0506

EPSS 0% CVSS 4.3

MEDIUM This Month

IBM XSS Sterling Multi Channel Fulfillment Solution +1

NVD

CVE-2013-0505

EPSS 0% CVSS 5.5

MEDIUM This Month

Code Injection IBM Sterling Multi Channel Fulfillment Solution +1

NVD