| Package | Affected versions | Patched versions |
|---|---|---|
| websphere commerce | = 6.0.0.0= 6.0.0.1= 6.0.0.10= 6.0.0.11= 6.0.0.2= 6.0.0.3= 6.0.0.4= 6.0.0.5= 6.0.0.6= 6.0.0.7= 6.0.0.8= 6.0.0.9= 7.0= 7.0.0.1= 7.0.0.2= 7.0.0.3= 7.0.0.4= 7.0.0.5= 7.0.0.6= 7.0.0.7= 7.0.0.8= 7.0.0.9= 8.0.0.0= 8.0.0.1= 8.0.0.10= 8.0.0.11= 8.0.0.12= 8.0.0.13= 8.0.0.14= 8.0.0.15= 8.0.0.16= 8.0.0.17= 8.0.0.18= 8.0.0.19= 8.0.0.2= 8.0.0.3= 8.0.0.4= 8.0.0.5= 8.0.0.6= 8.0.0.7= 8.0.0.8= 8.0.0.9= 8.0.1.0= 8.0.1.1= 8.0.1.11= 8.0.1.12= 8.0.1.2= 8.0.1.3= 8.0.1.4= 8.0.1.5= 8.0.1.6= 8.0.1.7= 8.0.1.8= 8.0.1.9 |
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 127385.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free