CVE-2013-0505

IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:P/A:N
ibmCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 39%
VendorProductVersion
ibmsterling_multi-channel_fulfillment_solution
8.0
ibmsterling_selling_and_fulfillment_foundation
8.5
ibmsterling_selling_and_fulfillment_foundation
9.0
ibmsterling_selling_and_fulfillment_foundation
9.1.0
ibmsterling_selling_and_fulfillment_foundation
9.2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg1ID358571
http://www-01.ibm.com/support/docview.wss?uid=swg21631302
https://exchange.xforce.ibmcloud.com/vulnerabilities/82339
http://www-01.ibm.com/support/docview.wss?uid=swg1ID358571
http://www-01.ibm.com/support/docview.wss?uid=swg21631302
https://exchange.xforce.ibmcloud.com/vulnerabilities/82339