cbcvebase.
CVE-2018-1541
published 2018-10-24

CVE-2018-1541: IBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…

medium5.4CVSS 3.0
AVNACLPRLUIRSCCLILAN
IBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142596.

Affected

9 ranges
VendorProductVersion rangeFixed in
ibmwebsphere_commerce——
ibmwebsphere_commerce8.0.0.0 – 8.0.0.19—
ibmwebsphere_commerce8.0.1.0 – 8.0.1.13—
ibmwebsphere_commerce8.0.3.0 – 8.0.3.6—
ibmwebsphere_commerce8.0.4.0 – 8.0.4.17—
ibmwebsphere_commerce9.0.0.0 – 9.0.0.6—
ibmwebsphere_commerce_enterprise——
ibmwebsphere_commerce_enterprise——
ibmwebsphere_commerce_enterprise——