CVE-2013-6322

IBM Sterling Selling And Fulfillment Foundation - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 8.0 before HF128 and 8.5 before HF93 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References (3)

Scores

EPSS 0.0019
EPSS Percentile 40.4%

Details

CWE
CWE-79
Status published
Products (3)
ibm/sterling_selling_and_fulfillment_foundation
ibm/sterling_selling_and_fulfillment_foundation
n/a/n/a
Published Nov 28, 2013
Tracked Since Feb 18, 2026