CVE-2013-6322

LOW 3.5CVE-2013-6322 · Published 28/11/2013 · updated 17/06/2026

In short

CVE-2013-6322 is a LOW (CVSS 3.5) vulnerability affecting sterling selling and fulfillment foundation (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.94%, higher than 61.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sterling selling and fulfillment foundation ibm	`= 8.0= 8.5`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 8.0 before HF128 and 8.5 before HF93 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References

www-01.ibm.com/support/docview.wss
www-01.ibm.com/support/docview.wss · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/88902

More vulnerabilities in sterling selling and fulfillment foundation

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

sterling selling and fulfillment foundation

ibm

= 8.0= 8.5

No fix yet

More vulnerabilities in sterling selling and fulfillment foundation

See all →