CVE-2014-4807

CWE-3993 documents3 sources
Severity
4.0MEDIUM
EPSS
0.4%
top 38.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Sterling Selling AND Fulfillment Foundation
Timeline
PublishedNov 23
Latest updateMay 17

Description

Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 9.3.0 before FP8 allows remote authenticated users to cause a denial of service (CPU consumption) via a '\0' character.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 8.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-mqfg-r4mp-f7xf: Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 9↗2022-05-17
▶
CVEList
CVE-2014-4807: Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 9↗2014-11-23
▶
CVE-2014-4807 (MEDIUM CVSS 4) | Sterling Order Management in IBM St | cvebase.io