Cross site request forgery (csrf)

2017-03-3118:59:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.0%

JSON

IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 2000943.

CPENameOperatorVersion
sterling_selling_and_fulfillment_foundationeq9.4.0
sterling_selling_and_fulfillment_foundationeq9.2.1
sterling_selling_and_fulfillment_foundationeq9.3.0
sterling_selling_and_fulfillment_foundationeq9.5.0
sterling_selling_and_fulfillment_foundationeq9.2.0

Name	Operator	Version
sterling_selling_and_fulfillment_foundation	eq	9.4.0
sterling_selling_and_fulfillment_foundation	eq	9.2.1
sterling_selling_and_fulfillment_foundation	eq	9.3.0
sterling_selling_and_fulfillment_foundation	eq	9.5.0
sterling_selling_and_fulfillment_foundation	eq	9.2.0