Unscored CVE-2015-5009 EUVD-2015-5026GHSA-f472-hx4q-9m64

Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack …

Published Jan 18, 2016 · Updated Aug 6, 2024 · Assigned by ibm

Description

Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through FP11, 6.0 Feature Pack 4, 7.0 through FP9, 7.0 Feature Pack 5 through 8, and 8.0 before 8.0.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21972610
JR54834 vendor-advisory
JR54264 vendor-advisory
JR54824 vendor-advisory
1034695 vdb-entry
JR54432 vendor-advisory
JR54265 vendor-advisory
JR54899 vendor-advisory
JR54825 vendor-advisory