IBM Websphere Commerce vulnerabilities, page 3

43 vulnerabilities

Known vulnerabilities in IBM Websphere Commerce, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2009-2751ibmwebsphere_commerce
EPSS score
0.54%
IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which has unspecified impact and remote attack vectors.1.5CVE-2009-2752ibmwebsphere_commerce
EPSS score
0.25%
IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.1.5CVE-2009-2094ibmwebsphere_commerce
EPSS score
0.24%
Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local users to obtain sensitive information via unknown vectors.