CVE-2009-2752

LOW 1.5CVE-2009-2752 · Published 05/02/2010 · updated 16/06/2026

In short

CVE-2009-2752 is a LOW (CVSS 1.5) vulnerability affecting websphere commerce (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.25%, higher than 16.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
websphere commerce ibm	`= 7.0`	No fix yet

Description

IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.

References

www-01.ibm.com/support/docview.wss · Vendor Advisory
www-1.ibm.com/support/docview.wss
www-1.ibm.com/support/docview.wss
exchange.xforce.ibmcloud.com/vulnerabilities/56090

More vulnerabilities in websphere commerce

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free