CVE-2015-1911

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 53.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
IBM Sterling Field SalesIBM Sterling Order ManagementIBM Sterling Selling AND Fulfillment Foundation
Timeline
PublishedMay 25
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in Sterling Order Management 8.5 before HF113, Sterling Selling and Fulfillment Foundation 9.0.0 before FP92, and Sterling Field Sales (SFS) 9.0 before HF7 in IBM Sterling Selling and Fulfillment Suite allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages3 packages

Patches

Patch: www-01.ibm.com ↗Patch: www-01.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-cvp6-388r-8j4x: Cross-site scripting (XSS) vulnerability in Sterling Order Management 8↗2022-05-17
▶
CVEList
CVE-2015-1911: Cross-site scripting (XSS) vulnerability in Sterling Order Management 8↗2015-05-25
▶
CVE-2015-1911 (MEDIUM CVSS 4.3) | Cross-site scripting (XSS) vulnerab | cvebase.io