exploitDog

CVE-2022-33959

Опубликовано: 07 апр. 2023

Источник: nvd

CVSS3: 5.4

CVSS3: 8.1

EPSS Низкий

Описание

IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of other users. IBM X-Force ID: 229320.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/229320
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6981911
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/229320
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6981911
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:sterling_order_management:10:*:*:*:*:*:*:*

EPSS

Процентиль: 6%

0.00024

Низкий

5.4 Medium

CVSS3

8.1 High

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-qw5x-g9qx-73xw

CVSS3: 8.1

github

почти 3 года назад

IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of other users. IBM X-Force ID: 229320.

EPSS

Процентиль: 6%

0.00024

Низкий

5.4 Medium

CVSS3

8.1 High

CVSS3

Дефекты

NVD-CWE-noinfo