CVE-2015-0196

Published: Jun 29, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

CRLF injection vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11 and 7.0 before 7.0.0.8 Cumulative iFix 2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.

Affected (20)

Products: Ibm: Websphere Commerce

Ibm

1 product

Websphere Commerce

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Commerce	Version 6.0.0.10
Ibm Websphere Commerce	Version 6.0.0.11
Ibm Websphere Commerce	Version 6.0.0.1
Ibm Websphere Commerce	Version 6.0.0.2
Ibm Websphere Commerce	Version 6.0.0.3
Ibm Websphere Commerce	Version 6.0.0.4
Ibm Websphere Commerce	Version 6.0.0.5
Ibm Websphere Commerce	Version 6.0.0.6
Ibm Websphere Commerce	Version 6.0.0.7
Ibm Websphere Commerce	Version 6.0.0.8
Ibm Websphere Commerce	Version 6.0.0.9
Ibm Websphere Commerce	Version 7.0.0.1
Ibm Websphere Commerce	Version 7.0.0.2
Ibm Websphere Commerce	Version 7.0.0.3
Ibm Websphere Commerce	Version 7.0.0.4
Ibm Websphere Commerce	Version 7.0.0.5
Ibm Websphere Commerce	Version 7.0.0.6
Ibm Websphere Commerce	Version 7.0.0.7
Ibm Websphere Commerce	Version 7.0.0.8
Ibm Websphere Commerce	Version 7.0