534
VMScore

CVE-2016-9991

Published: 08/06/2017 Updated: 14/06/2017
CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8
CVSS v3 Base Score: 8 | Impact Score: 5.9 | Exploitability Score: 2.1
VMScore: 534
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

Vulnerability Summary

IBM Sterling Order Management 9.2 up to and including 9.5 is vulnerable to cross-site request forgery which could allow an malicious user to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 121314.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm sterling selling and fulfillment foundation 9.2.0

ibm sterling selling and fulfillment foundation 9.3.0

ibm sterling selling and fulfillment foundation 9.4.0

ibm sterling selling and fulfillment foundation 9.5.0

ibm sterling selling and fulfillment foundation 9.2.1