Login Request a demo
Unscored severity · published Dec 6, 2010
CVE-2010-2639
IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging…
–
CVSS
1.2%
EPSS
No
On KEV
Description
IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WC
Websphere Commerce · Ibm
7.0; 7.0.0.1 · source: NVD
Affected product
WC
Websphere Commerce
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2639
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2639
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg24028397
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1JR38114
www.securitytracker.com
http://www.securitytracker.com/id?1024845
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/63406
More from Websphere Commerce
9.8
CVE-2016-6090
IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data, performing of unauthorized administrative operations, and…
8.8
CVE-2018-1808
IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input control
8.8
CVE-2015-5007
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 through 7.0.0.9, and 7.0 Feature Pack 8 allows remote authenticated users to…
8.0
CVE-2016-2863
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 7.0 Feature Pack 8, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8.0.1.2 allows remote authenticated users…
7.5
CVE-2017-1569
IBM WebSphere Commerce 7.0 and 8.0 contains an unspecified vulnerability in Marketing ESpot's that could cause a denial of service