Vulnerabilities > CVE-2015-7397 - Unspecified vulnerability in IBM Websphere Commerce 7.0

047910
CVSS 7.4 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
ibm
NVD
Published: 2016-01-10
Updated: 2024-11-21

Summary

Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referrer parameter.

Vulnerable Configurations

Part Description Count
Application
Ibm
1

References