CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-2862

Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 before 7.0.0.9 cumulative iFix 3, and 8.0 before 8.0.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 61.3%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2016-2862

Ibm » Websphere Commerce » Version: 6.0.0.0

cpe:2.3:a:ibm:websphere_commerce:6.0.0.0
Ibm » Websphere Commerce » Version: 6.0.0.1

cpe:2.3:a:ibm:websphere_commerce:6.0.0.1
Ibm » Websphere Commerce » Version: 6.0.0.10

cpe:2.3:a:ibm:websphere_commerce:6.0.0.10
Ibm » Websphere Commerce » Version: 6.0.0.11

cpe:2.3:a:ibm:websphere_commerce:6.0.0.11
Ibm » Websphere Commerce » Version: 6.0.0.2

cpe:2.3:a:ibm:websphere_commerce:6.0.0.2
Ibm » Websphere Commerce » Version: 6.0.0.3

cpe:2.3:a:ibm:websphere_commerce:6.0.0.3
Ibm » Websphere Commerce » Version: 6.0.0.4

cpe:2.3:a:ibm:websphere_commerce:6.0.0.4
Ibm » Websphere Commerce » Version: 6.0.0.5

cpe:2.3:a:ibm:websphere_commerce:6.0.0.5
Ibm » Websphere Commerce » Version: 6.0.0.6

cpe:2.3:a:ibm:websphere_commerce:6.0.0.6
Ibm » Websphere Commerce » Version: 6.0.0.7

cpe:2.3:a:ibm:websphere_commerce:6.0.0.7
Ibm » Websphere Commerce » Version: 6.0.0.8

cpe:2.3:a:ibm:websphere_commerce:6.0.0.8
Ibm » Websphere Commerce » Version: 6.0.0.9

cpe:2.3:a:ibm:websphere_commerce:6.0.0.9
Ibm » Websphere Commerce » Version: 7.0

cpe:2.3:a:ibm:websphere_commerce:7.0
Ibm » Websphere Commerce » Version: 7.0.0.1

cpe:2.3:a:ibm:websphere_commerce:7.0.0.1
Ibm » Websphere Commerce » Version: 7.0.0.2

cpe:2.3:a:ibm:websphere_commerce:7.0.0.2
Ibm » Websphere Commerce » Version: 7.0.0.3

cpe:2.3:a:ibm:websphere_commerce:7.0.0.3
Ibm » Websphere Commerce » Version: 7.0.0.4

cpe:2.3:a:ibm:websphere_commerce:7.0.0.4
Ibm » Websphere Commerce » Version: 7.0.0.5

cpe:2.3:a:ibm:websphere_commerce:7.0.0.5
Ibm » Websphere Commerce » Version: 7.0.0.6

cpe:2.3:a:ibm:websphere_commerce:7.0.0.6
Ibm » Websphere Commerce » Version: 7.0.0.7

cpe:2.3:a:ibm:websphere_commerce:7.0.0.7
Ibm » Websphere Commerce » Version: 7.0.0.8

cpe:2.3:a:ibm:websphere_commerce:7.0.0.8
Ibm » Websphere Commerce » Version: 7.0.0.9

cpe:2.3:a:ibm:websphere_commerce:7.0.0.9
Ibm » Websphere Commerce » Version: 8.0.0.0

cpe:2.3:a:ibm:websphere_commerce:8.0.0.0
Ibm » Websphere Commerce » Version: 8.0.0.1

cpe:2.3:a:ibm:websphere_commerce:8.0.0.1
Ibm » Websphere Commerce » Version: 8.0.0.2

cpe:2.3:a:ibm:websphere_commerce:8.0.0.2
Ibm » Websphere Commerce » Version: 8.0.0.3

cpe:2.3:a:ibm:websphere_commerce:8.0.0.3
Ibm » Websphere Commerce » Version: 8.0.0.4

cpe:2.3:a:ibm:websphere_commerce:8.0.0.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-2862

Products

Pricing

Contact Us