Vulnerability Name: | CVE-2014-0932 (CCN-92264) | ||||||||
Assigned: | 2014-04-21 | ||||||||
Published: | 2014-04-21 | ||||||||
Updated: | 2017-08-29 | ||||||||
Summary: | Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. | ||||||||
CVSS v3 Severity: | 2.6 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N)
| ||||||||
CVSS v2 Severity: | 3.5 Low (CVSS v2 Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N) 3.0 Low (Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N/E:H/RL:OF/RC:C)
3.0 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N/E:H/RL:OF/RC:C)
| ||||||||
Vulnerability Type: | CWE-79 | ||||||||
Vulnerability Consequences: | Cross-Site Scripting | ||||||||
References: | Source: MITRE Type: CNA CVE-2014-0932 Source: CCN Type: SA58108 IBM Sterling Order Management Cross-Site Scripting Vulnerability Source: CCN Type: SA58241 IBM Sterling Selling and Fulfillment Suite Cross-Site Scripting Vulnerability Source: AIXAPAR Type: UNKNOWN IT00419 Source: CCN Type: IBM Security Bulletin 1670912 IBM Sterling Order Management is affected by Cross Site Scripting (XSS) Vulnerability (CVE-2014-0932) Source: CONFIRM Type: Vendor Advisory http://www-01.ibm.com/support/docview.wss?uid=swg21670912 Source: BID Type: UNKNOWN 66993 Source: CCN Type: BID-66993 IBM Sterling Order Management CVE-2014-0932 Cross Site Scripting Vulnerability Source: XF Type: UNKNOWN ibm-sterling-cve20140932-xss(92264) Source: XF Type: UNKNOWN ibm-sterlingom-cve20140932-xss(92264) | ||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: ![]() | ||||||||
BACK |