CVE-2017-1170

Published: Apr 26, 2017Modified: May 13, 2026

5.3

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Exploitability: 1.8 / Impact: 3.4

Source: NVD

Description

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user's session. IBM X-Force ID: 123230.

Affected (32)

Products: Ibm: Websphere Commerce

Ibm

1 product

Websphere Commerce

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Commerce	Version 8.0.0.0
Ibm Websphere Commerce	Version 8.0.0.10
Ibm Websphere Commerce	Version 8.0.0.11
Ibm Websphere Commerce	Version 8.0.0.12
Ibm Websphere Commerce	Version 8.0.0.13
Ibm Websphere Commerce	Version 8.0.0.14
Ibm Websphere Commerce	Version 8.0.0.15
Ibm Websphere Commerce	Version 8.0.0.16
Ibm Websphere Commerce	Version 8.0.0.17
Ibm Websphere Commerce	Version 8.0.0.1
Ibm Websphere Commerce	Version 8.0.0.2
Ibm Websphere Commerce	Version 8.0.0.3
Ibm Websphere Commerce	Version 8.0.0.4
Ibm Websphere Commerce	Version 8.0.0.5
Ibm Websphere Commerce	Version 8.0.0.6
Ibm Websphere Commerce	Version 8.0.0.7
Ibm Websphere Commerce	Version 8.0.0.8
Ibm Websphere Commerce	Version 8.0.0.9
Ibm Websphere Commerce	Version 8.0.1.0
Ibm Websphere Commerce	Version 8.0.1.1
Ibm Websphere Commerce	Version 8.0.1.2
Ibm Websphere Commerce	Version 8.0.1.3
Ibm Websphere Commerce	Version 8.0.1.4
Ibm Websphere Commerce	Version 8.0.1.5
Ibm Websphere Commerce	Version 8.0.1.6
Ibm Websphere Commerce	Version 8.0.1.7
Ibm Websphere Commerce	Version 8.0.1.8
Ibm Websphere Commerce	Version 8.0.1.9
Ibm Websphere Commerce	Version 8.0.3.0
Ibm Websphere Commerce	Version 8.0.3.1
Ibm Websphere Commerce	Version 8.0.3.2
Ibm Websphere Commerce	Version 8.0.3.3