CVEvulnerability
CVE-2014-0932
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-04-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.5 before HF105 and Sterling Selling and Fulfillment Foundation 9.0 before HF85 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Affected configurations
• ibm sterling order management 8.5
• ibm sterling selling and fulfillment foundation 9.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT00419 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21670912 Vendor Advisory
- http://www.securityfocus.com/bid/66993 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92264 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT00419 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21670912 Vendor Advisory
- http://www.securityfocus.com/bid/66993 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92264 exchange.xforce.ibmcloud.com