CVE-2016-8917

Summary

IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 2000943.

Affected Software

VendorProductVersion RangeStatus
IBM CorporationSterling Order Management8.5affected
IBM CorporationSterling Order Management8.0affected
IBM CorporationSterling Order Management9.1affected
IBM CorporationSterling Order Management9.2affected
IBM CorporationSterling Order Management9.2.1affected
IBM CorporationSterling Order Management9.3affected
IBM CorporationSterling Order Management9.4affected
IBM CorporationSterling Order Management9.5affected

Weaknesses

  • Gain Access

ADP Enrichment

CVE Program Container

Additional References

References