IBM Websphere Commerce Enterprise
7 CVEs affecting IBM Websphere Commerce Enterprise. Latest disclosed: 2018-10-24. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-6090 | Critical | 9.8 | 2017-02-01 | IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data, performing of unauthorized administrative opera… |
CVE-2017-1569 | High | 7.5 | 2017-10-03 | IBM WebSphere Commerce 7.0 and 8.0 contains an unspecified vulnerability in Marketing ESpot's that could cause a denial of service. IBM X-Force ID: 131779. |
CVE-2017-1398 | Medium | 6.1 | 2017-07-10 | IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing attacks, using an o… |
CVE-2018-1541 | Medium | 5.4 | 2018-10-24 | IBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t… |
CVE-2017-1170 | Medium | 5.3 | 2017-04-26 | IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user's session. IBM X-Force ID: 123230. |
CVE-2016-5894 | Medium | 5.1 | 2017-03-08 | IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. A local user could v… |
CVE-2017-1484 | Medium | 4.3 | 2017-11-27 | IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user pe… |