CVE-2018-1808
Description
IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input control. IBM X-Force ID: 149828.
CWE
- (none)
Affected
- IBM / WebSphere Commerce — v=9.0.0.0 [affected]; v=9.0.0.4 [affected]; v=9.0.0.1 [affected]; v=9.0.0.2 [affected]; v=9.0.0.3 [affected]; v=9.0.0.5 [affected]; v=9.0.0.6 [affected]
CVSS
- 3.0 score=4.3 severity=MEDIUM
CVSS:3.0/A:N/AC:L/AV:N/C:N/I:L/PR:L/S:U/UI:N/E:U/RC:C/RL:O
References
- http://www.securitytracker.com/id/1042034 vdb-entry, x_refsource_SECTRACK
- https://exchange.xforce.ibmcloud.com/vulnerabilities/149828 vdb-entry, x_refsource_XF
- https://www-01.ibm.com/support/docview.wss?uid=ibm10735905 x_refsource_CONFIRM
Source
cvelistV5-main/cves/2018/1xxx/CVE-2018-1808.json