CVE-2017-1170

2017-04-2617:00:00

ibm

www.cve.org

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user’s session. IBM X-Force ID: 123230.

CNA Affected

[
  {
    "product": "WebSphere Commerce Enterprise",
    "vendor": "IBM Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "8.0, 8.0.1.0, 8.0.3.0, 8.0.4.0"
      }
    ]
  }
]