Ibm Sterling Order Management
5 CVEs affecting Ibm Sterling Order Management. Latest disclosed: 2023-04-07. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-20554 | Medium | 6.1 | 2021-09-30 | IBM Sterling Order Management 9.4, 9.5, and 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t… |
CVE-2022-34333 | Medium | 5.9 | 2023-04-07 | IBM Sterling Order Management 10.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user… |
CVE-2022-33959 | Medium | 5.4 | 2023-04-07 | IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of other users. IBM X-Force ID: 229320. |
CVE-2015-1911 | | 2015-05-25 | Cross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and Ster… | |
CVE-2014-0932 | | 2014-04-21 | Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allo… |