PT-2014-3954

CVE-2014-0932

·

Published

2014-04-21

·

Updated

2017-08-29

Description by

CVSS 2.0
3.5
Low
MetricsAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions IBM Sterling Order Management versions 8.5 before HF105 IBM Sterling Selling and Fulfillment Foundation versions 9.0 before HF85
Description A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. This can lead to the execution of malicious scripts on the user's browser.
Recommendations For IBM Sterling Order Management version 8.5, apply Hotfix 105 to resolve the issue. For IBM Sterling Selling and Fulfillment Foundation version 9.0, apply Hotfix 85 to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2014-0932
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com