IBM WebSphere Commerce 5.6.1.1 (Fix Pack 3)
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:websphere_commerce:5.6.1.3:*:*:*:*:*:*:*
part: a version: 5.6.1.3 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Websphere Commerce (39fd22fb-ffd5-58fa-a0a3-dc8f8d899069) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-0566 |
vulnerable | 2026-06-08 05:03:48.586076 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the (1) Accelerator JSPs, (2) Organization Administration Console JSPs, and (3) Administration Console JSPs in WebSphere Commerce Tools in IBM WebSphere Commerce 5.6.1.0 through 5.6.1.5, 6.0.0.0 through 6.0.0.11, and 7.0.0.0 through 7.0.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2013-08-27T01:00:00.000Z
Updated: 2024-08-06T14:33:05.248Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0523 |
vulnerable | 2026-06-08 05:03:48.436544 |
Details available
IBM WebSphere Commerce Enterprise 5.6.x through 5.6.1.5, 6.0.x through 6.0.0.11, and 7.0.x through 7.0.0.7 does not use a suitable encryption algorithm for storefront web requests, which allows remote attackers to obtain sensitive information via a padding oracle attack that targets certain UTF-8 processing of the krypto parameter, and leverages unspecified browser access or traffic-log access.
Published: 2013-06-21T19:00:00.000Z
Updated: 2024-08-06T14:33:05.474Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.