CVE-2015-1911

Currently unrated

Key Information:

Vendor
IBM
Status
Sterling Order Management
Sterling Selling And Fulfillment Foundation
Sterling Field Sales
Vendor
CVE Published:
25 May 2015

Summary

Cross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and Sterling Field Sales (SFS) 9.0 before HF7 in IBM Sterling Selling and Fulfillment Suite allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21700864
x_refsource_CONFIRM
http://www.securityfocus.com/bid/74224
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.