CVE-2017-1484 — Sensitive Information Exposure in IBM Websphere Commerce Enterprise

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 56.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Websphere Commerce EnterpriseIBM Websphere Commerce
Timeline
PublishedNov 27
Latest updateMay 17

Description

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5ibm/websphere_commerce_enterprise7.0, 8.0+1
▶NVDibm/websphere_commerce49 versions+48

🔴Vulnerability Details

2
GHSA
GHSA-3hrg-r9w6-f7gq: IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7↗2022-05-17
▶
CVEList
CVE-2017-1484: IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7↗2017-11-27
▶
CVE-2017-1484 — Sensitive Information Exposure in IBM | cvebase