CVE-2013-0506

MEDIUM 4.3CVE-2013-0506 · Published 19/03/2013 · updated 16/06/2026

In short

CVE-2013-0506 is a MEDIUM (CVSS 4.3) vulnerability affecting sterling multi-channel fulfillment solution (ibm), sterling selling and fulfillment foundation (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 67.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sterling multi-channel fulfillment solution ibm	`= 8.0`	No fix yet
sterling selling and fulfillment foundation ibm	`= 8.5= 9.0= 9.1.0= 9.2.0`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References

www-01.ibm.com/support/docview.wss
www-01.ibm.com/support/docview.wss · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/82341

CVE-2013-0506

In short

Description

References

More vulnerabilities in sterling multi-channel fulfillment solution

CVE-2013-0506

In short

Description

References

More vulnerabilities in sterling multi-channel fulfillment solution