CVE-2015-0200

IBM WebSphere Commerce 6.x-6.0.0.11 and 7.x < 7.0.0.8 IF2 - Unauthorized Sensitive Database Information Exposure

Title source: llm
STIX 2.1

Description

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x before 7.0.0.8 IF2 allows local users to obtain sensitive database information via unspecified vectors.

References (4)

Core 4
Core References
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1JR50683
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21902799
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1JR52306
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032392

Scores

EPSS 0.0038
EPSS Percentile 29.9%

Details

CWE
CWE-200
Status published
Products (21)
ibm/websphere_commerce 6.0.0.0
ibm/websphere_commerce 6.0.0.1
ibm/websphere_commerce 6.0.0.2
ibm/websphere_commerce 6.0.0.3
ibm/websphere_commerce 6.0.0.4
ibm/websphere_commerce 6.0.0.5
ibm/websphere_commerce 6.0.0.6
ibm/websphere_commerce 6.0.0.7
ibm/websphere_commerce 6.0.0.8
ibm/websphere_commerce 6.0.0.9
... and 11 more
Published May 29, 2015
Tracked Since Feb 18, 2026