CVE-2015-7444

The Update Installer in IBM WebSphere Commerce Enterprise 7.0.0.8 and 7.0.0.9 does not properly replicate the search index, which allows attackers to obtain sensitive information via unspecified vectors.

Score

CVSS 3.0 5.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2016-02-15

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Websphere Commerce (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1JR54563
• http://www-01.ibm.com/support/docview.wss?uid=swg24041614