IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 on z/OS, in certain configurations involving Federated Repositories for. Rated low severity (CVSS 3.3). No vendor patch available.
Privilege Escalation
IBM
Websphere Application Server
NVD
CVSS 2.0
3.3
EPSS
0.1%
IBM WebSphere Commerce 7.0 before 7.0.0.6, when persistent sessions and personalization IDs are enabled, allows remote attackers to cause a denial of service (resource consumption) via unspecified. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. No vendor patch available.
Denial Of Service
IBM
Websphere Commerce
NVD
CVSS 2.0
2.6
EPSS
0.6%