GCVE - cpe:2.3:a:ibm:websphere_commerce_enterprise:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_commerce_enterprise:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Websphere Commerce Enterprise (`76780e3a-33a8-58c0-8d06-01a972a5f646`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-1541`	vulnerable	2026-06-08 05:11:18.380467	Details available MEDIUM (5.4) IBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142596. Published: 2018-10-24T13:00:00.000Z Updated: 2024-09-16T19:35:20.784Z Open on db.gcve.eu Reference links https://www.ibm.com/support/docview.wss?uid=ibm10731225 http://www.securityfocus.com/bid/105744 https://exchange.xforce.ibmcloud.com/vulnerabilities/142596	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1569`	vulnerable	2026-06-08 05:09:22.597106	Details available IBM WebSphere Commerce 7.0 and 8.0 contains an unspecified vulnerability in Marketing ESpot's that could cause a denial of service. IBM X-Force ID: 131779. Published: 2017-10-02T20:00:00.000Z Updated: 2024-09-16T22:14:25.989Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/101073 http://www.ibm.com/support/docview.wss?uid=swg22008547 https://exchange.xforce.ibmcloud.com/vulnerabilities/131779	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1484`	vulnerable	2026-06-08 05:09:22.313355	Details available IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622. Published: 2017-11-27T21:00:00.000Z Updated: 2024-09-17T00:51:10.719Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/128622 http://www.ibm.com/support/docview.wss?uid=swg22010103 http://www.securityfocus.com/bid/101894	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-1398`	vulnerable	2026-06-08 05:09:22.000901	Details available IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 127385. Published: 2017-07-10T16:00:00.000Z Updated: 2024-09-17T02:32:20.301Z Open on db.gcve.eu Reference links http://www.ibm.com/support/docview.wss?uid=swg22005360 http://www.securityfocus.com/bid/99491 https://exchange.xforce.ibmcloud.com/vulnerabilities/127385	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-5015`	vulnerable	2026-06-08 05:06:48.574784	Details available IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers to obtain sensitive information via a crafted REST URL. Published: 2015-11-08T22:00:00.000Z Updated: 2024-08-06T06:32:31.914Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg24041027 http://www-01.ibm.com/support/docview.wss?uid=swg1JR53970 http://www.securitytracker.com/id/1034104	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.