CVE-2013-2992

Description

The Search component in IBM WebSphere Commerce 7.0 FP4 through FP6, in certain search-term association configurations, allows remote attackers to cause a denial of service via a crafted query.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/84018

http://www-01.ibm.com/support/docview.wss?uid=swg21648644

http://www-01.ibm.com/support/docview.wss?uid=swg1JR47425

http://www-01.ibm.com/support/docview.wss?uid=swg1JR47420

http://www-01.ibm.com/support/docview.wss?uid=swg1JR47313

http://www-01.ibm.com/support/docview.wss?uid=swg1JR47295

http://www-01.ibm.com/support/docview.wss?uid=swg1JR47273

http://www-01.ibm.com/support/docview.wss?uid=swg1JR46013

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS