Page 8 of 50 results (0.010 seconds)

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2012-3298

https://notcve.org/view.php?id=CVE-2012-3298

Unspecified vulnerability in the REST services framework in IBM WebSphere Commerce 7.0 Feature Pack 4 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors. Vulnerabilidad no especificada en en entorno de trabajo de servicios REST en IBM WebSphere Commerce v7.0 Feature Pack 4 permite a atacantes remotos obtener información sensible, modificar datos o provocar una denegación de servicio a través de vectores no especificados. • http://www-01.ibm.com/support/docview.wss?uid=swg1JR42770 http://www.ibm.com/support/docview.wss?uid=swg21610905 https://exchange.xforce.ibmcloud.com/vulnerabilities/77294 •

CVSS: 10.0EPSS: 0%CPEs: 16EXPL: 0

CVE-2011-3577

https://notcve.org/view.php?id=CVE-2011-3577

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors. IBM WebSphere Commerce v6.x a través de v6.0.0.11 y v7.0.0.3 7.x no aplica correctamente la autenticación Activity Token para Web Services, que tienen un impacto no especificado y vectores de ataque. • http://secunia.com/advisories/45999 http://www.ibm.com/support/docview.wss?uid=swg1JR40420 http://www.ibm.com/support/docview.wss?uid=swg24030908 http://www.osvdb.org/75428 http://www.securityfocus.com/bid/49643 https://exchange.xforce.ibmcloud.com/vulnerabilities/69838 • CWE-287: Improper Authentication •

CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 0

CVE-2010-2639

https://notcve.org/view.php?id=CVE-2010-2639

IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues." IBM WebSphere Commerce Enterprise 7.0 anteriores 7.0.0.2 permite a atacantes remotos leer mensajes previstos para otros destinatarios a través de vectores que involucran acceso por el sistema de mensajería fuera de línea a la clase RunTimeProfileCacheCmdImpl. Relacionado con el almacenamiento en caché de objetos cambiantes ("mutable") y temas de concurrencia. • http://www-01.ibm.com/support/docview.wss?uid=swg24028397 http://www-1.ibm.com/support/docview.wss?uid=swg1JR38114 http://www.securitytracker.com/id?1024845 https://exchange.xforce.ibmcloud.com/vulnerabilities/63406 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 6.5EPSS: 0%CPEs: 9EXPL: 0

CVE-2010-2635

https://notcve.org/view.php?id=CVE-2010-2635

SQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters to "Commerce Organization Admin Console JavaServer pages." Vulnerabilidad de inyección SQL en IBM WebSphere Commerce 6.0 anterior v6.0.0.10 permite a usuarios autenticados remotamente ejecutar comandos SQL de su elección a través de parámetros no especificados en "páginas Commerce Organization Admin Console JavaServer ." • http://www-01.ibm.com/support/docview.wss?uid=swg1IZ73130 https://exchange.xforce.ibmcloud.com/vulnerabilities/62951 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2010-2636

https://notcve.org/view.php?id=CVE-2010-2636

Multiple cross-site scripting (XSS) vulnerabilities in sample store pages in IBM WebSphere Commerce 7.0 before 7.0.0.1 allow remote attackers to inject arbitrary web script or HTML via a crafted URL. Múltiples vulnerabilidades de ejecución de comandos en sitios cruzados (XSS) en páginas de ejemplo almacenadas en IBM WebSphere Commerce v7.0 anterior a v7.0.0.1 que permite a atacantes remotos inyectar codigo de script web o código HTML de su elección a través de una URL manipulada. • http://www-01.ibm.com/support/docview.wss?uid=swg1JR35424 https://exchange.xforce.ibmcloud.com/vulnerabilities/62952 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •