CVE-2015-5007
15.01.2016, 03:59
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 8 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
| Vendor | Product | Version |
|---|---|---|
| ibm | websphere_commerce | 6.0.0.0 |
| ibm | websphere_commerce | 6.0.0.1 |
| ibm | websphere_commerce | 6.0.0.2 |
| ibm | websphere_commerce | 6.0.0.3 |
| ibm | websphere_commerce | 6.0.0.4 |
| ibm | websphere_commerce | 6.0.0.5 |
| ibm | websphere_commerce | 6.0.0.6 |
| ibm | websphere_commerce | 6.0.0.7 |
| ibm | websphere_commerce | 6.0.0.8 |
| ibm | websphere_commerce | 6.0.0.9 |
| ibm | websphere_commerce | 6.0.0.10 |
| ibm | websphere_commerce | 6.0.0.11 |
| ibm | websphere_commerce | 7.0 |
| ibm | websphere_commerce | 7.0:feature_pack_8 |
| ibm | websphere_commerce | 7.0.0.1 |
| ibm | websphere_commerce | 7.0.0.2 |
| ibm | websphere_commerce | 7.0.0.3 |
| ibm | websphere_commerce | 7.0.0.4 |
| ibm | websphere_commerce | 7.0.0.5 |
| ibm | websphere_commerce | 7.0.0.6 |
| ibm | websphere_commerce | 7.0.0.7 |
| ibm | websphere_commerce | 7.0.0.8 |
| ibm | websphere_commerce | 7.0.0.9 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References