Lucene search
HistoryNov 09, 2010 - 9:00 p.m.
CVE-2010-2636
ibm websphere commerce
xss
remote attackers
web script
security vulnerability
5.6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
46.7%
Multiple cross-site scripting (XSS) vulnerabilities in sample store pages in IBM WebSphere Commerce 7.0 before 7.0.0.1 allow remote attackers to inject arbitrary web script or HTML via a crafted URL.
Affected configurations
Node
ibmwebsphere_commerceMatch7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm:websphere_commerce | ibm websphere commerce | eq | 7.0 |
Related
cvelist
cvelist
CVE-2010-2636
2010-11-09 20:00:00
nvd
nvd
CVE-2010-2636
2010-11-09 21:00:02
prion
prion
Cross site scripting
2010-11-09 21:00:00
5.6 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
46.7%
Related for CVE-2010-2636