Skip to main content

Sterling Multi Channel Fulfillment Solution

3 CVEs product

Monthly

CVE-2013-0578 May 10, 11:42 LOW Monitor

The Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0 before HF128 and IBM Sterling Selling and Fulfillment Foundation 8.5 before HF93, 9.0 before HF73, 9.1.0. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass IBM Sterling Multi Channel Fulfillment Solution Sterling Selling And Fulfillment Foundation
NVD
CVSS 2.0
3.5
EPSS
0.2%
CVE-2013-0506 Mar 19, 18:55 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

XSS IBM Sterling Multi Channel Fulfillment Solution Sterling Selling And Fulfillment Foundation
NVD
CVSS 2.0
4.3
EPSS
0.3%
CVE-2013-0505 Mar 19, 18:55 MEDIUM This Month

IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

IBM Code Injection Sterling Multi Channel Fulfillment Solution Sterling Selling And Fulfillment Foundation
NVD
CVSS 2.0
5.5
EPSS
0.2%
EPSS 0% CVSS 3.5
LOW Monitor

The Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0 before HF128 and IBM Sterling Selling and Fulfillment Foundation 8.5 before HF93, 9.0 before HF73, 9.1.0. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass IBM Sterling Multi Channel Fulfillment Solution +1
NVD
EPSS 0% CVSS 4.3
MEDIUM This Month

Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

XSS IBM Sterling Multi Channel Fulfillment Solution +1
NVD
EPSS 0% CVSS 5.5
MEDIUM This Month

IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

IBM Code Injection Sterling Multi Channel Fulfillment Solution +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy