High severity8.0NVD Advisory· Published Jun 8, 2017· Updated Jun 17, 2026
CVE-2016-9991
CVE-2016-9991
Description
IBM Sterling Order Management 9.2 through 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 121314.
Affected products
7cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:sterling_selling_and_fulfillment_foundation:9.5.0:*:*:*:*:*:*:*
9.2 - 9.5+ 1 more
- (no CPE)range: 9.2 - 9.5
- (no CPE)range: 9.2
Patches
Vulnerability mechanics
References
3- www-01.ibm.com/support/docview.wssnvdPatchVendor Advisory
- www.securityfocus.com/bid/96084nvdThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/121314nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.