Cross-Site Request Forgery Vulnerability in IBM Sterling Order Management
CVE-2016-9991
8HIGH
Summary
IBM Sterling Order Management versions 9.2 to 9.5 are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. This allows attackers to perform unauthorized actions on behalf of users trusted by the application. By exploiting this flaw, malicious actors can manipulate user sessions and execute harmful commands, compromising the integrity and confidentiality of user accounts and data.
Affected Version(s)
Sterling Order Management 9.2
Sterling Order Management 9.2.1
Sterling Order Management 9.3
References
CVSS V3.1
Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved