PT-2014-3954
CVE-2014-0932
·
تاريخ النشر
2014-04-21
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Sterling Order Management versions 8.5 before HF105
IBM Sterling Selling and Fulfillment Foundation versions 9.0 before HF85
Description
A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This can lead to the execution of malicious scripts on the user's browser.
Recommendations
For IBM Sterling Order Management version 8.5, apply Hotfix 105 to resolve the issue.
For IBM Sterling Selling and Fulfillment Foundation version 9.0, apply Hotfix 85 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾