CVE-2013-2992

Published: Sep 9, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The Search component in IBM WebSphere Commerce 7.0 FP4 through FP6, in certain search-term association configurations, allows remote attackers to cause a denial of service via a crafted query.

Affected (3)

Products: Ibm: Websphere Commerce

Ibm

1 product

Websphere Commerce

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Commerce	Version 7.0.0.4
Ibm Websphere Commerce	Version 7.0.0.5
Ibm Websphere Commerce	Version 7.0.0.6

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (16)

http://www-01.ibm.com/support/docview.wss?uid=swg1JR46013

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1JR47273

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1JR47295

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1JR47313

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1JR47420

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1JR47425

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21648644

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/84018

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg1JR46013