CVE-2016-8917

IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 2000943...

CVE-2016-8917

IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 2000943...

Cross site request forgery (csrf)

IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 2000943...

CVE-2016-8917

CVE-2016-8917 affects IBM Sterling Order Management (and IBM Sterling Selling and Fulfillment Foundation) versions 9.2–9.5. The vulnerability is a cross-site request forgery (CSRF) that could allow an attacker to perform malicious actions transmitted from an authenticated user’s session. Public s...

CVE-2016-8917

IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 2000943...

IBM Sterling Order Management Cross-Site Request Forgery Vulnerability

IBM Sterling Order Management is an order management product from IBM USA. It provides better order provisioning by centralizing reserves. A cross-site request forgery vulnerability exists in IBM Sterling Order Management. An attacker could exploit this vulnerability to perform unauthorized...

CVE-2016-5953

IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL...

Code injection

IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL...

CVE-2016-5953

IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL...

CVE-2016-5953

IBM Sterling Order Management is affected by CVE-2016-5953, where the session identifier is transmitted in the URL and exposed on error pages as Base64-encoded data. The IBM security bulletin lists affected releases in the Sterling Selling and Fulfillment Foundation family (9.1.0, 9.2.0, 9.2.1, 9...

IBM Sterling Order Management Information Disclosure Vulnerability (CNVD-2017-00862)

IBM Sterling Order Management is a suite of order management software that orchestrates the cross-channel sales and order fulfillment process across a dynamic business network of customers, suppliers and partners. A remote information disclosure vulnerability exists in IBM Sterling Order...

PIMS order management system step2.php has a reload vulnerability

PIMS is an online order management system for subscription-based websites. A reinstallation vulnerability exists in step2.php of the PIMS order management system. Since the program does not validate the installation, an attacker can use the vulnerability to reinstall the system and directly...

CVE-2016-5534

Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2016-5534

Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2016-5534

Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors...

Commercial pie ONex order management system reflective XSS

No description provided by source...

CVE-2016-2212

The getOrderByStatusUrlKey function in the MageRssHelperOrder class in app/code/core/Mage/Rss/Helper/Order.php in Magento Enterprise Edition before 1.14.2.3 and Magento Community Edition before 1.9.2.3 allows remote attackers to obtain sensitive order information via the orderid in a JSON object ...

Oracle Retail Applications Oracle Retail Order Management System Cloud Service Component Vulnerability

Oracle Retail Applications is a suite of retail applications store solutions from Oracle Corporation, of which Oracle Retail Order Management System Cloud Service is a retail order management system cloud service component. A security vulnerability exists in the Order Entry subcomponent of the...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Quality QA / Order Management Integration Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle Quality QA / Order Management Integration component, which allows remote attackers to exploit the vulnerability to submit special request...