CVE-2013-0505

EUVD-2013-0516
IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 38%
Affected Products (NVD)
VendorProductVersion
ibmsterling_multi-channel_fulfillment_solution
8.0
ibmsterling_selling_and_fulfillment_foundation
8.5
ibmsterling_selling_and_fulfillment_foundation
9.0
ibmsterling_selling_and_fulfillment_foundation
9.1.0
ibmsterling_selling_and_fulfillment_foundation
9.2.0
𝑥
= Vulnerable software versions