Ibm Sterling Order Management
4 CVEs affecting Ibm Sterling Order Management. Latest disclosed: 2023-04-07. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-9991 | High | 8.0 | 2017-06-08 | IBM Sterling Order Management 9.2 through 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized a… |
CVE-2021-20554 | Medium | 6.1 | 2021-09-30 | IBM Sterling Order Management 9.4, 9.5, and 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t… |
CVE-2022-34333 | Medium | 5.9 | 2023-04-07 | IBM Sterling Order Management 10.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user… |
CVE-2022-33959 | Medium | 5.4 | 2023-04-07 | IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of other users. IBM X-Force ID: 229320. |