CVE-2001-0389 — IBM Websphere Application Server vulnerability

3 documents3 sources

Severity

5.0MEDIUMNVD

EPSS

0.7%

top 28.86%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Net.commerce IBM Websphere Application Server

Timeline

PublishedJul 2

Latest updateApr 30

Description

IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDibm/websphere_application_server5.1.0.3

▶NVDibm/net.commerce3.1.2

🔴Vulnerability Details

GHSA

GHSA-96fj-94r5-8c5r: IBM Websphere/NetCommerce3 3↗2022-04-30

▶

CVEList

CVE-2001-0389: IBM Websphere/NetCommerce3 3↗2001-05-24

▶