CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2009-2956
https://notcve.org/view.php?id=CVE-2009-2956
24 Aug 2009 — The (1) Net.Commerce and (2) Net.Data components in IBM WebSphere Commerce Suite store sensitive information under the web root with insufficient access control, which allows remote attackers to discover passwords, and database and filesystem details, via direct requests for configuration files. Los componentes (1) Net.Commerce y (2) Net.Data en IBM WebSphere Commerce Suite almacenan información sensible en el directorio web raíz con un control de acceso insuficiente, permitiendo a atacantes remotos descubr... • https://exchange.xforce.ibmcloud.com/vulnerabilities/52616 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.8EPSS: 1%CPEs: 3EXPL: 0CVE-2001-0962
https://notcve.org/view.php?id=CVE-2001-0962
19 Sep 2001 — IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing. • http://archives.neohapsis.com/archives/bugtraq/2001-09/0234.html •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2001-0446
https://notcve.org/view.php?id=CVE-2001-0446
24 May 2001 — IBM WCS (WebSphere Commerce Suite) 4.0.1 with Application Server 3.0.2 allows remote attackers to read source code for .jsp files by appending a / to the requested URL. • http://marc.info/?l=bugtraq&m=98583082225053&w=2 •
CVSS: 9.8EPSS: 16%CPEs: 20EXPL: 2CVE-2001-0319 – IBM Net.Commerce 2.0/3.x/4.x - orderdspc.d2w order_rn Option SQL Injection
https://notcve.org/view.php?id=CVE-2001-0319
03 May 2001 — orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report capability. • https://www.exploit-db.com/exploits/20618 •