CVE-2014-4807

Published: Nov 23, 2014Modified: May 6, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 9.3.0 before FP8 allows remote authenticated users to cause a denial of service (CPU consumption) via a '\0' character.

Affected (8)

Products: Ibm: Sterling Selling And Fulfillment Foundation

Ibm

1 product

Sterling Selling And Fulfillment Foundation

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Sterling Selling And Fulfillment Foundation	Up to 9.3.0.7
Ibm Sterling Selling And Fulfillment Foundation	Version 9.3.0.1
Ibm Sterling Selling And Fulfillment Foundation	Version 9.3.0.2
Ibm Sterling Selling And Fulfillment Foundation	Version 9.3.0.3
Ibm Sterling Selling And Fulfillment Foundation	Version 9.3.0.4
Ibm Sterling Selling And Fulfillment Foundation	Version 9.3.0.5
Ibm Sterling Selling And Fulfillment Foundation	Version 9.3.0.6
Ibm Sterling Selling And Fulfillment Foundation	Version 9.3.0