Lucene search
HistoryNov 09, 2010 - 9:00 p.m.
CVE-2010-2635
cve-2010-2635
sql injection
ibm websphere commerce
nvd
security vulnerability
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
43.9%
SQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters to “Commerce Organization Admin Console JavaServer pages.”
Affected configurations
Node
ibmwebsphere_commerceMatch6.0.0.1
ORibmwebsphere_commerceMatch6.0.0.2
ORibmwebsphere_commerceMatch6.0.0.3
ORibmwebsphere_commerceMatch6.0.0.4
ORibmwebsphere_commerceMatch6.0.0.5
ORibmwebsphere_commerceMatch6.0.0.6
ORibmwebsphere_commerceMatch6.0.0.7
ORibmwebsphere_commerceMatch6.0.0.8
ORibmwebsphere_commerceMatch6.0.0.9
Related
nvd
nvd
CVE-2010-2635
2010-11-09 21:00:02
prion
prion
Sql injection
2010-11-09 21:00:00
cvelist
cvelist
CVE-2010-2635
2010-11-09 20:00:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
43.9%
Related for CVE-2010-2635