Code injection

2017-04-2617:59:00

PRIOn knowledge base

www.prio-n.com

4.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user’s session. IBM X-Force ID: 123230.

CPENameOperatorVersion
websphere_commerceeq8.0.1.7
websphere_commerceeq8.0.0.2
websphere_commerceeq8.0.0.5
websphere_commerceeq8.0.1.6
websphere_commerceeq8.0.0.6
websphere_commerceeq8.0.1.0
websphere_commerceeq8.0.0.9
websphere_commerceeq8.0.3.2
websphere_commerceeq8.0.3.0
websphere_commerceeq8.0.0.14

Name	Operator	Version
websphere_commerce	eq	8.0.1.7
websphere_commerce	eq	8.0.0.2
websphere_commerce	eq	8.0.0.5
websphere_commerce	eq	8.0.1.6
websphere_commerce	eq	8.0.0.6
websphere_commerce	eq	8.0.1.0
websphere_commerce	eq	8.0.0.9
websphere_commerce	eq	8.0.3.2
websphere_commerce	eq	8.0.3.0
websphere_commerce	eq	8.0.0.14