VulnerabilityModified
CVE-2009-2094
Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local users to obtain sensitive information via unknown vectors.
LOW 1.5EPSS 0.24%
Does this matter?
Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local users to obtain sensitive information via unknown vectors.
- CVSS 2.0
- 1.5 LOWAV:L/AC:M/Au:S/C:P/I:N/A:N
- EPSS
- 0.24% probability · 16th percentile
- CISA KEV
- Not listed
- Affected
- ibm/websphere commerce
- Source
- cve@mitre.org
References
- http://publib.boulder.ibm.com/infocenter/wchelp/v6r0m0/topic/com.ibm.commerce.admin.doc/refs/rig_new_and_changed.htmPatch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1LI74286
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52398
- http://publib.boulder.ibm.com/infocenter/wchelp/v6r0m0/topic/com.ibm.commerce.admin.doc/refs/rig_new_and_changed.htmPatch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1LI74286
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52398
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.