CVE-2016-6090
CriticalSummary
IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data, performing unauthorized administrative operations, and potentially causing a denial of service.
Risk Assessment
This vulnerability may expose the organization to the loss of sensitive data and unauthorized access to systems, potentially leading to serious legal and financial consequences.
Recommendation
It is recommended to update the software to the latest version and conduct a security audit to identify and mitigate potential threats.
Other vulnerabilities in IBM WebSphere Commerce
See all- CVE-2015-5007High
The CSRF vulnerability in IBM WebSphere Commerce allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences. It affects versions 6.0 through 6.0.0.11 and 7.0 through 7.0.0.9 and 7.0 Feature Pack 8.
- CVE-2014-0943High
IBM WebSphere Commerce versions 6.0 Feature Pack 2 through 5, 7.0.0.0 through 7.0.0.8, and 7.0 Feature Pack 1 through 7 allow remote attackers to cause a denial of service (resource consumption and daemon crash) via a malformed id parameter in a request.
Original NVD description (English source)
IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data, performing of unauthorized administrative operations, and potentially causing a denial of service.