Ibm Net.Commerce vulnerabilities

3 known vulnerabilities affecting ibm/net.commerce.

Total CVEs

3

CISA KEV

0

Public exploits

2

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2001-0390MEDIUMCVSS 5.0PoCv2.0v3.0+3 more2001-07-02

CVE-2001-0390 [MEDIUM] CVE-2001-0390: IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly ca IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters.

CVE-2001-0389MEDIUMCVSS 5.0v3.1.22001-07-02

CVE-2001-0389 [MEDIUM] CVE-2001-0389: IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro with a NOEXISTINGHTMLBLOCK argument.

CVE-2001-0319HIGHCVSS 7.5PoCv2.0v3.0+4 more2001-05-03

CVE-2001-0319 [HIGH] CVE-2001-0319: orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report capability.