5.9
Medium
CVE-2022-34333 IBM Sterling Order Management 10.0 does not require that users should have strong passwords by default, which makes it…
Description
IBM Sterling Order Management 10.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 229698.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sterling Order Management | 10.0 | No fix stated |
Other CVEs of Sterling Order Management
The 4 CVEs of Sterling Order Management →
CVE-2022-33959
IBM Sterling Order Management 10.0 could allow a user to bypass validation and perform unauthorized actions on behalf of…
5.4
Medium
CVE-2021-20554
IBM Sterling Order Management 9.4, 9.5, and 10.0 is vulnerable to cross-site scripting
6.1
Medium
CVE-2016-9991
IBM Sterling Order Management 9.2 through 9.5 is vulnerable to cross-site request forgery which could allow an…
Not rated