Cross-Site Request Forgery Vulnerability in IBM Sterling Order Management
CVE-2016-9991

8HIGH

Key Information:

Vendor

IBM
Status
Sterling Order Management
Vendor
CVE Published:
8 June 2017

What is CVE-2016-9991?

IBM Sterling Order Management versions 9.2 to 9.5 are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability. This allows attackers to perform unauthorized actions on behalf of users trusted by the application. By exploiting this flaw, malicious actors can manipulate user sessions and execute harmful commands, compromising the integrity and confidentiality of user accounts and data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Sterling Order Management 9.2

Sterling Order Management 9.2.1

Sterling Order Management 9.3

References

http://www.securityfocus.com/bid/96084
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/121314
x_refsource_MISC
http://www-01.ibm.com/support/docview.wss?uid=swg21998167
x_refsource_CONFIRM

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.