CVE-2016-9991

High

Published: 08/06/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Sterling Order Management versions 9.2 through 9.5 is vulnerable to cross-site request forgery, which could allow an attacker to execute malicious and unauthorized actions on behalf of a trusted user.

Risk Assessment

An attacker could exploit this vulnerability to perform unauthorized operations, potentially leading to data loss or system integrity breaches.

Recommendation

It is recommended to upgrade to the latest version of the software and implement protections against CSRF attacks.

Other vulnerabilities in IBM Sterling Order Management

CVE-2016-8917High
IBM Sterling Order Management versions 9.2 - 9.5 is vulnerable to cross-site request forgery, allowing an attacker to execute malicious and unauthorized actions transmitted from a trusted user.

Original NVD description (English source)

IBM Sterling Order Management 9.2 through 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 121314.