Lucene search

MitreCVE-2009-2038

HistoryJun 12, 2009 - 6:00 p.m.

CVE-2009-2038

2009-06-1218:00:00

mitre

web.nvd.nist.gov

vulnerability

finnish bank payment

oscommerce

unknown impact

attack vectors

bank charges

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

71.2%

JSON

Unspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown impact and attack vectors related to bank charges.

Affected configurations

Nvd

Node

oscommerceoscommerceMatch2.2

AND

oscommercefinnish_bank_payment

VendorProductVersionCPE
oscommerceoscommerce2.2cpe:2.3:a:oscommerce:oscommerce:2.2:*:*:*:*:*:*:*
oscommercefinnish_bank_payment*cpe:2.3:a:oscommerce:finnish_bank_payment:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oscommerce	oscommerce	2.2	cpe:2.3:a:oscommerce:oscommerce:2.2:::::::*
oscommerce	finnish_bank_payment	*	cpe:2.3:a:oscommerce:finnish_bank_payment::::::::

References

addons.oscommerce.com/info/5485

secunia.com/advisories/35385

www.cert.fi/haavoittuvuudet/2009/haavoittuvuus-2009-046.html

exchange.xforce.ibmcloud.com/vulnerabilities/51007

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.003

Percentile

71.2%

JSON

Related for CVE-2009-2038