CVE-2016-9991

Published: Jun 8, 2017Modified: May 13, 2026

8.0

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.1 / Impact: 5.9

Source: NVD

Description

IBM Sterling Order Management 9.2 through 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 121314.

Affected (5)

Products: Ibm: Sterling Selling And Fulfillment Foundation

Ibm

1 product

Sterling Selling And Fulfillment Foundation

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Sterling Selling And Fulfillment Foundation	Version 9.2.0
Ibm Sterling Selling And Fulfillment Foundation	Version 9.2.1
Ibm Sterling Selling And Fulfillment Foundation	Version 9.3.0
Ibm Sterling Selling And Fulfillment Foundation	Version 9.4.0
Ibm Sterling Selling And Fulfillment Foundation	Version 9.5.0