1.5
CVE-2009-2752
- EPSS 0.25%
- Veröffentlicht 05.02.2010 22:30:02
- Zuletzt bearbeitet 16.06.2026 23:10:09
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginIBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Websphere Commerce Version7.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.25% | 0.157 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 1.5 | 2.7 | 2.9 |
AV:L/AC:M/Au:S/C:P/I:N/A:N
|
http://www-1.ibm.com/support/docview.wss?uid=swg1JR35136
http://www-01.ibm.com/support/docview.wss?uid=swg21418445
http://www-1.ibm.com/support/docview.wss?uid=swg1JR35199
https://exchange.xforce.ibmcloud.com/vulnerabilities/56090