CVE-2014-0943
HighSummary
IBM WebSphere Commerce versions 6.0 Feature Pack 2 through 5, 7.0.0.0 through 7.0.0.8, and 7.0 Feature Pack 1 through 7 allow remote attackers to cause a denial of service (resource consumption and daemon crash) via a malformed id parameter in a request.
Risk Assessment
Attackers can exploit this vulnerability to exhaust system resources and crash the daemon, leading to service unavailability.
Recommendation
It is recommended to update to the latest version of IBM WebSphere Commerce to mitigate the risks associated with this vulnerability.
Other vulnerabilities in IBM WebSphere Commerce
See all- CVE-2015-5007High
The CSRF vulnerability in IBM WebSphere Commerce allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. It affects versions 6.0 through 6.0.0.11 and 7.0 through 7.0.0.9 and 7.0 Feature Pack 8.
- CVE-2016-6090Critical
IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data, performing unauthorized administrative operations, and potentially causing a denial of service.
Original NVD description (English source)
IBM WebSphere Commerce 6.0 Feature Pack 2 through Feature Pack 5, 7.0.0.0 through 7.0.0.8, and 7.0 Feature Pack 1 through Feature Pack 7 allows remote attackers to cause a denial of service (resource consumption and daemon crash) via a malformed id parameter in a request.