Known vulnerabilities in Sterling Selling and Fulfillment Foundation

Vendor: IBM Corporation
Software: Sterling Selling and Fulfillment Foundation
Software CPE: cpe:2.3:a:ibm_corporation:sterling_selling_and_fulfillment_foundation:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 8
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Sterling Selling and Fulfillment Foundation Sterling Selling and Fulfillment Foundation is affected by 8 known vulnerabilities: 1 critical, 1 high, 3 medium, 3 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93413 - Cross-Site Request Forgery (CSRF)
CVE-2016-8917		 CWE-352 Low
No
No
 9.2.0-FP55, 9.2.1-FP34, 9.3.0-FP32, 9.4.0-FP24, 9.5.0-FP6 27.06.2024 SB2017050840
#VU93412 - Cross-Site Request Forgery (CSRF)
CVE-2016-9991		 CWE-352 Low
No
No
 9.2.0-FP54, 9.2.1-FP32, 9.3.0-FP30, 9.4.0-FP21, 9.5.0-FP2 27.06.2024 SB2017050839
#VU93362 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-1911		 CWE-79 Medium
No
No
 9.0.0 FP92 26.06.2024 SB2015042116
#VU89921 - Improper input validation
CVE-2013-0505		 CWE-20 Low
No
No
 8.0.0127, 8.5.0.89, 9.0.0.69, 9.1.0.41, 9.2.0.13 30.05.2024 SB2017050836
#VU89920 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-0506		 CWE-79 Medium
No
No
 8.0.0127, 8.5.0.89, 9.0.0.69, 9.1.0.41, 9.2.0.13 30.05.2024 SB2017050836
#VU89914 - Deserialization of Untrusted Data
CVE-2015-7450		 CWE-502 High
Available
Exploited
 8.5- SFP4, 9.0.0- SFP4, 9.1.0- SFP4, 9.2.0- SFP4, 9.2.1-SFP4, 9.3.0-SFP3, 9.4.0-SFP1 30.05.2024 SB2016050815
SB2025022817
#VU5930 - Improper Control of Generation of Code ('Code Injection')
CVE-2017-5638		 CWE-94 Critical
Available
Exploited
 9.1.0- SFP6, 9.2.0- SFP6, 9.2.1- SFP6, 9.3.0-SFP5, 9.4.0-SFP3, 9.5.0-SFP2 09.03.2017 SB2017030610
SB2017040603
SB2023022303
and 2 more
#VU5233 - Resource exhaustion
CVE-2014-0050		 CWE-400 Medium
Available
No
 9.0.0- SFP3, 9.1.0- SFP3, 9.2.0- SFP3, 9.2.1-SFP3, 9.3.0- SFP2 23.01.2017 SB2014020601
SB2015092620
SB2014041701
and 12 more