VULNERABILITY INTELLIGENCE
CVE-2013-0505
CVSS score5.5 MEDIUM
EPSS probability1.07%
CISA KEVNot currently listed
Published2013-03-19
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:N
Description
IBM Sterling Order Management 8.0 before HF127, 8.5 before HF89, 9.0 before HF69, 9.1.0 before FP41, and 9.2.0 before FP13 allows remote authenticated users to conduct XPath injection attacks, and read arbitrary XML files, via unspecified vectors.
Weakness classification
- CWE-20: Improper Input Validation
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor