Ibm Corporation Websphere Commerce Enterprise vulnerabilities

CVE-2017-1170 [MEDIUM] CVE-2017-1170: IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user's session. IBM X-Force ID: 123230.

CVE-2016-5894 [MEDIUM] CWE-200 CVE-2016-5894: IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. A local user could view a plain text password in a Unix console. IBM Reference #: 1997408.

CVE-2016-6090 [CRITICAL] CVE-2016-6090: IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user per IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data, performing of unauthorized administrative operations, and potentially causing a denial of service.