Описание
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622.
Ссылки
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- VDB EntryVendor Advisory
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- VDB EntryVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:ibm:websphere_commerce:8.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.11:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.12:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.13:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.14:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.15:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.16:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.17:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.18:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.0.19:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:a:ibm:websphere_commerce:8.0.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.8:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.9:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.10:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.11:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.12:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.1.13:*:*:*:*:*:*:*
Конфигурация 3
Одно из
cpe:2.3:a:ibm:websphere_commerce:8.0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.3.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.3.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.3.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.3.4:*:*:*:*:*:*:*
Конфигурация 4
Одно из
cpe:2.3:a:ibm:websphere_commerce:8.0.4.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.4.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.4.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.4.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.4.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.4.5:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.4.6:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.4.7:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_commerce:8.0.4.8:*:*:*:*:*:*:*
Конфигурация 5
cpe:2.3:a:ibm:websphere_commerce:7.0:feature_pack_8:*:*:*:*:*:*
EPSS
Процентиль: 44%
0.00212
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-200
Связанные уязвимости
CVSS3: 4.3
github
больше 3 лет назад
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622.
EPSS
Процентиль: 44%
0.00212
Низкий
4.3 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-200