NVD

Id
87890  
Name
CVE-2017-1398  
Description
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 127385.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-07-18  
Published
2017-07-10  
Modified Date
2017-07-17  
Seq
2017-1398  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
426490 87890 CVE-2017-2773 97135  View
426491 87890 CVE-2017-2773 https://pivotal.io/security/cve-2017-2773  View
426492 87890 CVE-2017-2773 97135  View
426493 87890 CVE-2017-2773 https://pivotal.io/security/cve-2017-2773  View
426494 87890 CVE-2017-2773 97135  View
426495 87890 CVE-2017-2773 https://pivotal.io/security/cve-2017-2773  View
430116 87890 CVE-2017-0458 1037968  View
430117 87890 CVE-2017-0458 1037968  View

Related JVN