Vulnerability Details CVE-2014-0943
IBM WebSphere Commerce 6.0 Feature Pack 2 through Feature Pack 5, 7.0.0.0 through 7.0.0.8, and 7.0 Feature Pack 1 through Feature Pack 7 allows remote attackers to cause a denial of service (resource consumption and daemon crash) via a malformed id parameter in a request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 78.1%
CVSS Severity
CVSS v2 Score 7.1
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR49881
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR49996
- http://www-01.ibm.com/support/docview.wss?uid=swg21671377
- http://www.securitytracker.com/id/1030284
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92402
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR49881
- http://www-01.ibm.com/support/docview.wss?uid=swg1JR49996
- http://www-01.ibm.com/support/docview.wss?uid=swg21671377
- http://www.securitytracker.com/id/1030284
- https://exchange.xforce.ibmcloud.com/vulnerabilities/92402
Products affected by CVE-2014-0943
-
cpe:2.3:a:ibm:websphere_commerce:6.0.0.0
-
cpe:2.3:a:ibm:websphere_commerce:7.0
-
cpe:2.3:a:ibm:websphere_commerce:7.0.0.1
-
cpe:2.3:a:ibm:websphere_commerce:7.0.0.2
-
cpe:2.3:a:ibm:websphere_commerce:7.0.0.3
-
cpe:2.3:a:ibm:websphere_commerce:7.0.0.4
-
cpe:2.3:a:ibm:websphere_commerce:7.0.0.5
-
cpe:2.3:a:ibm:websphere_commerce:7.0.0.6
-
cpe:2.3:a:ibm:websphere_commerce:7.0.0.7
-
cpe:2.3:a:ibm:websphere_commerce:7.0.0.8