CVE-2018-1808

CWE-94 — Code Injection3 documents3 sources
Severity
8.8HIGH
EPSS
0.2%
top 55.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Websphere Commerce
Timeline
PublishedNov 13
Latest updateMay 13

Description

IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input control. IBM X-Force ID: 149828.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages2 packages

▶NVDibm/websphere_commerce9.0.0.0 — 9.0.0.6
▶CVEListV5ibm/websphere_commerce7 versions+6

🔴Vulnerability Details

2
GHSA
GHSA-446c-58c3-q6jp: IBM WebSphere Commerce 9↗2022-05-13
▶
CVEList
CVE-2018-1808: IBM WebSphere Commerce 9↗2018-11-13
▶
CVE-2018-1808 (HIGH CVSS 8.8) | IBM WebSphere Commerce 9.0.0.0 thro | cvebase.io