CVE-2016-6090 IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data, performing of unauthorized administrative operations, and potentially causing a denial o...
CriticalCVSS 9.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data, performing of unauthorized administrative operations, and potentially causing a denial of service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere commerce | >= 6.0.0.0, <= 6.0.0.11 | No fix listed |
| ibm websphere commerce | >= 7.0.0.0, <= 7.0.0.9 | No fix listed |
| ibm websphere commerce | >= 8.0.0.0, <= 8.0.0.16 | No fix listed |
| ibm websphere commerce | >= 8.0.1.0, <= 8.0.1.8 | No fix listed |
| ibm websphere commerce | = 8.0.3.0 | No fix listed |
| ibm websphere commerce enterprise | = 6.0 | No fix listed |
| ibm websphere commerce enterprise | = 7.0 | No fix listed |
| ibm websphere commerce enterprise | = 7 | No fix listed |
| ibm websphere commerce enterprise | = 8.0 | No fix listed |
References
- www.ibm.com patch vendor-advisory
- 93873 third-party-advisory vdb-entry
- 1037091 third-party-advisory vdb-entry