CVE-2017-1484
UnknownEPSS 0.96%
Last modified
CVE-2017-1484 is a vulnerability of currently unknown severity. IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622.. EPSS estimates a 0.96% chance of exploitation in the next 30 days.
Description
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Ibm | Websphere Commerce | 8.0.0.0 | — |
| Ibm | Websphere Commerce | 8.0.0.1 | — |
| Ibm | Websphere Commerce | 8.0.0.2 | — |
| Ibm | Websphere Commerce | 8.0.0.3 | — |
| Ibm | Websphere Commerce | 8.0.0.4 | — |
| Ibm | Websphere Commerce | 8.0.0.5 | — |
| Ibm | Websphere Commerce | 8.0.0.6 | — |
| Ibm | Websphere Commerce | 8.0.0.7 | — |
| Ibm | Websphere Commerce | 8.0.0.8 | — |
| Ibm | Websphere Commerce | 8.0.0.9 | — |
| Ibm | Websphere Commerce | 8.0.0.10 | — |
| Ibm | Websphere Commerce | 8.0.0.11 | — |
| Ibm | Websphere Commerce | 8.0.0.12 | — |
| Ibm | Websphere Commerce | 8.0.0.13 | — |
| Ibm | Websphere Commerce | 8.0.0.14 | — |
| Ibm | Websphere Commerce | 8.0.0.15 | — |
| Ibm | Websphere Commerce | 8.0.0.16 | — |
| Ibm | Websphere Commerce | 8.0.0.17 | — |
| Ibm | Websphere Commerce | 8.0.0.18 | — |
| Ibm | Websphere Commerce | 8.0.0.19 | — |
| Ibm | Websphere Commerce | 8.0.1.0 | — |
| Ibm | Websphere Commerce | 8.0.1.1 | — |
| Ibm | Websphere Commerce | 8.0.1.2 | — |
| Ibm | Websphere Commerce | 8.0.1.3 | — |
| Ibm | Websphere Commerce | 8.0.1.4 | — |
| Ibm | Websphere Commerce | 8.0.1.5 | — |
| Ibm | Websphere Commerce | 8.0.1.6 | — |
| Ibm | Websphere Commerce | 8.0.1.7 | — |
| Ibm | Websphere Commerce | 8.0.1.8 | — |
| Ibm | Websphere Commerce | 8.0.1.9 | — |
| Ibm | Websphere Commerce | 8.0.1.10 | — |
| Ibm | Websphere Commerce | 8.0.1.11 | — |
| Ibm | Websphere Commerce | 8.0.1.12 | — |
| Ibm | Websphere Commerce | 8.0.1.13 | — |
| Ibm | Websphere Commerce | 8.0.3.0 | — |
| Ibm | Websphere Commerce | 8.0.3.1 | — |
| Ibm | Websphere Commerce | 8.0.3.2 | — |
| Ibm | Websphere Commerce | 8.0.3.3 | — |
| Ibm | Websphere Commerce | 8.0.3.4 | — |
| Ibm | Websphere Commerce | 8.0.4.0 | — |
| Ibm | Websphere Commerce | 8.0.4.1 | — |
| Ibm | Websphere Commerce | 8.0.4.2 | — |
| Ibm | Websphere Commerce | 8.0.4.3 | — |
| Ibm | Websphere Commerce | 8.0.4.4 | — |
| Ibm | Websphere Commerce | 8.0.4.5 | — |
| Ibm | Websphere Commerce | 8.0.4.6 | — |
| Ibm | Websphere Commerce | 8.0.4.7 | — |
| Ibm | Websphere Commerce | 8.0.4.8 | — |
| Ibm | Websphere Commerce | 7.0 | Feature Pack 8 |
References
- http://www.ibm.com/support/docview.wss?uid=swg22010103Vendor Advisory
- http://www.securityfocus.com/bid/101894Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/128622VDB Entry, Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg22010103Vendor Advisory
- http://www.securityfocus.com/bid/101894Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/128622VDB Entry, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-1484?
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 could allow an authenticated attacker to obtain information such as user personal data. IBM X-Force ID: 128622.
How severe is CVE-2017-1484?
Severity scoring for CVE-2017-1484 is pending analysis. The EPSS model estimates a 0.96% probability of exploitation in the next 30 days.
How do I fix CVE-2017-1484?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-14834This vulnerability allows remote attackers to execute arbitr…
- CVE-2017-14835This vulnerability allows remote attackers to execute arbitr…
- CVE-2017-14836This vulnerability allows remote attackers to execute arbitr…
- CVE-2017-14837This vulnerability allows remote attackers to execute arbitr…
- CVE-2017-14838TeamWork Job Links allows Arbitrary File Upload in profileCh…
- CVE-2017-14839TeamWork Photo Fusion allows Arbitrary File Upload in change…
- CVE-2017-14840TeamWork TicketPlus allows Arbitrary File Upload in updatePr…
- CVE-2017-14841Mojoomla Annual Maintenance Contract (AMC) Management System…
- CVE-2017-14842Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress al…
- CVE-2017-14843Mojoomla School Management System for WordPress allows SQL I…
- CVE-2017-14844Mojoomla WPGYM WordPress Gym Management System allows SQL In…
- CVE-2017-14845Mojoomla WPCHURCH Church Management System for WordPress all…
Are you affected by CVE-2017-1484?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST