CVE-2014-0943

IBM WebSphere Commerce 6.0 Feature Pack 2 through Feature Pack 5, 7.0.0.0 through 7.0.0.8, and 7.0 Feature Pack 1 through Feature Pack 7 allows remote attackers to cause a denial of service (resource consumption and daemon crash) via a malformed id parameter in a request.

Score

CVSS 2.0 7.1 High

Status

Modified - psirt@us.ibm.com

Published

2014-05-25

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Websphere Commerce (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1JR49881
• http://www-01.ibm.com/support/docview.wss?uid=swg1JR49996
• http://www-01.ibm.com/support/docview.wss?uid=swg21671377
• http://www.securitytracker.com/id/1030284
• https://exchange.xforce.ibmcloud.com/vulnerabilities/92402