CVE-2015-5015
published 2015-11-08CVE-2015-5015: IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers to obtain sensitive information via a crafted REST URL.
PriorityP423medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
2.06%
79.2th percentile
IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers to obtain sensitive information via a crafted REST URL.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | websphere_commerce_enterprise | <= 7.0.0.9 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www-01.ibm.com/support/docview.wss?uid=swg1JR53970http://www-01.ibm.com/support/docview.wss?uid=swg24041027http://www.securitytracker.com/id/1034104http://www-01.ibm.com/support/docview.wss?uid=swg1JR53970http://www-01.ibm.com/support/docview.wss?uid=swg24041027http://www.securitytracker.com/id/1034104
2015-11-08
Published