Cross-Site Request Forgery Vulnerability in IBM Sterling Order Management Software
CVE-2016-8917

8.8HIGH

Key Information:

Vendor

IBM
Status
Sterling Order Management
Vendor
CVE Published:
31 March 2017

What is CVE-2016-8917?

IBM Sterling Order Management versions 9.2 through 9.5 are susceptible to a cross-site request forgery vulnerability. This flaw enables an attacker to perform unauthorized actions on behalf of a trusted user, potentially compromising sensitive data and application integrity. Malicious requests can be transmitted without user consent, leading to severe security risks. Organizations using the affected versions are encouraged to implement appropriate security measures and apply patches to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Sterling Order Management 8.5

Sterling Order Management 8.0

Sterling Order Management 9.1

References

http://www.ibm.com/support/docview.wss?uid=swg22000943
x_refsource_CONFIRM
http://www.securityfocus.com/bid/97150
vdb-entryx_refsource_BID

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.