CVE-2017-1569: IBM WebSphere Commerce 7.0 and 8.0 contains an unspecified vulnerability in Marketing ESpot's that could cause a denial of service

High severity · published Oct 3, 2017

CVE-2017-1569

IBM WebSphere Commerce 7.0 and 8.0 contains an unspecified vulnerability in Marketing ESpot's that could cause a denial of service

7.5

CVSS

1.8%

EPSS

On KEV

Description

IBM WebSphere Commerce 7.0 and 8.0 contains an unspecified vulnerability in Marketing ESpot's that could cause a denial of service. IBM X-Force ID: 131779.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.8% · higher than 78% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Websphere Commerce · Ibm

7.0.0.0; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.0.4; 7.0.0.5; +34 more · source: NVD

Affected product

Websphere Commerce

Ibm

All Websphere Commerce CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2017-1569

CVE.org

https://www.cve.org/CVERecord?id=CVE-2017-1569

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg22008547

Third Party Advisory

http://www.securityfocus.com/bid/101073

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/131779