CVE-2015-7397

ALTO 7.4CVE-2015-7397 · Published 10/01/2016 · updated 17/06/2026

En resumen

CVE-2015-7397 es una vulnerabilidad ALTO (CVSS 7.4) que afecta a websphere commerce (ibm).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.8%, mayor que el 78.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
websphere commerce ibm	`= 7.0`	No fix yet

Description

Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referrer parameter.

References

www-01.ibm.com/support/docview.wss
www-01.ibm.com/support/docview.wss · Vendor Advisory
www-01.ibm.com/support/docview.wss · Vendor Advisory
securitytracker.com/id/1034640

Más vulnerabilidades de websphere commerce

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

websphere commerce

ibm

= 7.0

No fix yet

Más vulnerabilidades de websphere commerce

Ver todo →