IBM WebSphere Commerce 7.0 Feature Pack 8
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:websphere_commerce:7.0:feature_pack_8:*:*:*:*:*:*
part: a version: 7.0 update: feature_pack_8
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Websphere Commerce (39fd22fb-ffd5-58fa-a0a3-dc8f8d899069) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-1644 |
vulnerable | 2026-06-08 05:11:18.496566 |
Details available
LOW (3.1)
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 9.0.0.0 - 9.0.0.4, 8.0.0.0 - 8.0.0.19, 8.0.1.0 - 8.0.1.13, 8.0.3.0 - 8.0.3.6, 8.0.4.0 - 8.0.4.14, and 7.0.0.0 Feature Pack 8 could allow an authenticated user to obtain sensitive information about another user.
Published: 2018-08-27T15:00:00.000Z
Updated: 2024-09-16T17:49:28.929Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1484 |
vulnerable | 2026-06-08 05:09:22.326109 |
Details available
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622.
Published: 2017-11-27T21:00:00.000Z
Updated: 2024-09-17T00:51:10.719Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2863 |
vulnerable | 2026-06-08 05:07:43.516893 |
Details available
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 7.0 Feature Pack 8, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8.0.1.2 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Published: 2016-07-03T21:00:00.000Z
Updated: 2024-08-05T23:40:13.562Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5009 |
vulnerable | 2026-06-08 05:06:48.534787 |
Details available
Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and 8.0 before 8.0.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2016-01-18T02:00:00.000Z
Updated: 2024-08-06T06:32:31.422Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5008 |
vulnerable | 2026-06-08 05:06:48.532000 |
Details available
Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and 8.0 before 8.0.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Published: 2016-01-18T02:00:00.000Z
Updated: 2024-08-06T06:32:31.920Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5007 |
vulnerable | 2026-06-08 05:06:48.524605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.