CVE-2014-0932

Name of the Vulnerable Software and Affected Versions IBM Sterling Order Management versions 8.5 before HF105 IBM Sterling Selling and Fulfillment Foundation versions 9.0 before HF85

Description A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This can lead to the execution of malicious scripts on the user's browser.

Recommendations For IBM Sterling Order Management version 8.5, apply Hotfix 105 to resolve the issue. For IBM Sterling Selling and Fulfillment Foundation version 9.0, apply Hotfix 85 to resolve the issue.