CVE-2013-0505 | BDVDB-2026-55041 Detail

Description#

IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/82339
http://www-01.ibm.com/support/docview.wss?uid=swg1ID358571
http://www-01.ibm.com/support/docview.wss?uid=swg21631302

Exploit#

No public exploit known

History#

Version 12013-03-19Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.