Information disclosure in Ibm Websphere Commerce

CVE-2015-4980

Unspecified vulnerability in IBM WebSphere Commerce 7.0.0.6 through 7.0.0.9 allows remote authenticated users to obtain sensitive personal information via unknown vectors.

Vulnerability class: Information Disclosure

EPSS: 0.016 (73.8th percentile) — read the EPSS interpretation.

Affected products

Ibm Websphere_commerce — versions 7.0.0.6, 7.0.0.7, 7.0.0.8
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (vdb-entry, x_refsource_SECTRACK)