CVE-2016-0225

CWE-200 — Information ExposureCWE-284 — Improper Access Control8 documents4 sources
Severity
4.9MEDIUM
EPSS
0.2%
top 63.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Websphere Commerce
Timeline
PublishedFeb 29
Latest updateMay 13

Description

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.9 allows remote authenticated Commerce Accelerator administrators to obtain sensitive information via unspecified vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 1.2 | Impact: 3.6

Affected Packages1 packages

▶NVDibm/websphere_commerce22 versions+21

🔴Vulnerability Details

2
GHSA
GHSA-5gq4-mx55-wm2m: IBM WebSphere Commerce 6↗2022-05-13
▶
CVEList
CVE-2016-0225: IBM WebSphere Commerce 6↗2016-02-29
▶

💬Community

5
Bugzilla
CVE-2016-9536 libtiff: t2p_process_jpeg_strip heap-buffer-overflow↗2016-11-23
▶
Bugzilla
CVE-2016-9537 libtiff: Out-of-bounds write vulnerabilities in tools/tiffcrop.c↗2016-11-23
▶
Bugzilla
CVE-2016-9534 libtiff: TIFFFlushData1 heap-buffer-overflow↗2016-11-23
▶
Bugzilla
CVE-2016-9540 libtiff: cpStripToTile heap-buffer-overflow↗2016-11-23
▶
Bugzilla
CVE-2016-9533 libtiff: PixarLog horizontalDifference heap-buffer-overflow↗2016-11-23
▶
CVE-2016-0225 (MEDIUM CVSS 4.9) | IBM WebSphere Commerce 6.x through | cvebase.io