CVE-2016-5953

IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL...

CVE-2016-5953

IBM Sterling Order Management transmits the session identifier within the URL. When a user is unable to view a certain view due to not being allowed permissions, the website responds with an error page where the session identifier is encoded as Base64 in the URL...

CVE-2016-5953

IBM Sterling Order Management is affected by CVE-2016-5953, where the session identifier is transmitted in the URL and exposed on error pages as Base64-encoded data. The IBM security bulletin lists affected releases in the Sterling Selling and Fulfillment Foundation family (9.1.0, 9.2.0, 9.2.1, 9...

IBM Sterling Order Management Information Disclosure Vulnerability (CNVD-2017-00862)

IBM Sterling Order Management is a suite of order management software that orchestrates the cross-channel sales and order fulfillment process across a dynamic business network of customers, suppliers and partners. A remote information disclosure vulnerability exists in IBM Sterling Order...

PIMS order management system step2.php has a reload vulnerability

PIMS is an online order management system for subscription-based websites. A reinstallation vulnerability exists in step2.php of the PIMS order management system. Since the program does not validate the installation, an attacker can use the vulnerability to reinstall the system and directly...

CVE-2016-5534

Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2016-5534

Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors...

CVE-2016-5534

Unspecified vulnerability in the Siebel Apps - Customer Order Management component in Oracle Siebel CRM 16.1 allows remote authenticated users to affect confidentiality via unknown vectors...

Commercial pie ONex order management system reflective XSS

No description provided by source...

CVE-2016-2212

The getOrderByStatusUrlKey function in the MageRssHelperOrder class in app/code/core/Mage/Rss/Helper/Order.php in Magento Enterprise Edition before 1.14.2.3 and Magento Community Edition before 1.9.2.3 allows remote attackers to obtain sensitive order information via the orderid in a JSON object ...

Oracle Retail Applications Oracle Retail Order Management System Cloud Service Component Vulnerability

Oracle Retail Applications is a suite of retail applications store solutions from Oracle Corporation, of which Oracle Retail Order Management System Cloud Service is a retail order management system cloud service component. A security vulnerability exists in the Order Entry subcomponent of the...

Unspecified Vulnerability in Oracle PeopleSoft SCM Order Management Security Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability in the Oracle PeopleSoft SCM Order Management Security component allows remote attackers to exploit the vulnerability to make unauthorized changes to data...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Quality QA / Order Management Integration Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle Quality QA / Order Management Integration component, which allows remote attackers to exploit the vulnerability to submit special request...

CVE-2016-0590

Unspecified vulnerability in the PeopleSoft Enterprise SCM Order Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors...

CVE-2016-0590

Unspecified vulnerability in the PeopleSoft Enterprise SCM Order Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise SCM Order Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors...

CVE-2016-0516

Unspecified vulnerability in the Oracle Quality component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to QA / Order Management Integration...

CVE-2016-0516

Unspecified vulnerability in the Oracle Quality component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to QA / Order Management Integration...

Buffer overflow

Unspecified vulnerability in the Oracle Quality component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality and integrity via unknown vectors related to QA / Order Management Integration...