CVE-2018-1808

IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input control. IBM X-Force ID: 149828.

Score

CVSS 3.0 8.8 High

Status

Modified - psirt@us.ibm.com

Published

2018-11-13

Last modified

2024-09-17

Weaknesses

CWE-94

Affected products

• Websphere Commerce (Ibm)

References

• http://www.securitytracker.com/id/1042034
• https://exchange.xforce.ibmcloud.com/vulnerabilities/149828
• https://www-01.ibm.com/support/docview.wss?uid=ibm10735905