IBM Sterling Multi-Channel Fulfillment Solution vulnerabilities

3 CVEs affecting IBM Sterling Multi-Channel Fulfillment Solution, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-0578, published 2013-05-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-0578, published 2013-05-10. Low severity, CVSS 3.5. EPSS: 1.4% chance of exploitation in the next 30 days. The Sterling Order Management APIs in IBM Sterling Multi-Channel Fulfillment Solution 8.0 before HF128 and IBM Sterling Selling and Fulfillment Foundation 8.5 before HF93, 9.0 before HF73, 9.1.0…
CVE-2013-0506, published 2013-03-19. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated…
CVE-2013-0505, published 2013-03-19. Medium severity, CVSS 5.5. EPSS: 1.1% chance of exploitation in the next 30 days. IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and…