CVE-2015-7397

published 2016-01-10

CVE-2015-7397: Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect…

high 7.4 CVSS 3.0

AV N AC L PR N UI R S C C N I H A N

Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referrer parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ibm	websphere_commerce	—	—