Known vulnerabilities in Call Center for Commerce

Vendor: IBM Corporation
Software: Call Center for Commerce
Software CPE: cpe:2.3:a:ibm_corporation:call_center_for_commerce:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 41
Public exploits: 14
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Call Center for Commerce Call Center for Commerce is affected by 41 known vulnerabilities: 1 critical, 16 high, 23 medium, 1 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU90117 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-2992		 CWE-79 Medium
No
No
 10.0.12 31.05.2024 SB2024053143
SB2024053144
#VU90116 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-5169		 CWE-79 Medium
No
No
 10.0.12 31.05.2024 SB2024053143
SB2024053144
#VU90113 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-1772		 CWE-79 Low
Available
No
 10.0.12 31.05.2024 SB2024053143
SB2024053144
#VU90112 - Permissions, Privileges, and Access Controls
CVE-2011-5057		 CWE-264 Medium
Available
No
 10.0.12 31.05.2024 SB2024053143
SB2024053144
#VU90110 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-1006		 CWE-79 Medium
No
No
 10.0.12 31.05.2024 SB2024053143
SB2024053144
#VU90109 - Cross-Site Request Forgery (CSRF)
CVE-2012-4386		 CWE-352 Medium
No
No
 10.0.12 31.05.2024 SB2024053143
SB2024053144
#VU88754 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-2134		 CWE-94 High
Available
No
 10.0.12 17.04.2024 SB20240417121
SB2024052129
SB2024053144
and 1 more
#VU88752 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-2135		 CWE-94 High
No
No
 10.0.12 17.04.2024 SB20240417121
SB2024052129
SB2024053144
and 1 more
#VU88747 - Improper input validation
CVE-2012-0838		 CWE-20 High
No
No
 10.0.12 17.04.2024 SB20240417121
SB2024053144
#VU88746 - Permissions, Privileges, and Access Controls
CVE-2012-4387		 CWE-264 Medium
No
No
 10.0.12 17.04.2024 SB20240417121
SB2024053144
#VU88744 - Improper Handling of Parameters
CVE-2013-1965		 CWE-233 High
No
No
 10.0.12 17.04.2024 SB20240417121
SB2024052129
SB2024053144
and 1 more
#VU88558 - Permissions, Privileges, and Access Controls
CVE-2014-0113		 CWE-264 Medium
No
No
 10.0.12 16.04.2024 SB20240417121
SB2024053144
#VU82244 - Cross-Site Request Forgery (CSRF)
CVE-2014-7809		 CWE-352 Medium
No
No
 10.0.12 19.10.2023 SB2023101941
SB2015042113
SB2024053143
and 1 more
#VU82186 - Configuration
CVE-2013-4316		 CWE-16 High
No
No
 10.0.12 18.10.2023 SB2013042101
SB20240417121
SB2024053144
and 1 more
#VU68588 - Permissions, Privileges, and Access Controls
CVE-2014-0112		 CWE-264 High
Available
No
 10.0.12 22.10.2022 SB2014042909
SB2023022233
SB20240417121
and 2 more
#VU46152 - Command injection
CVE-2016-3081		 CWE-77 High
No
Exploited
 10.0.12 01.09.2020 SB2016042605
SB2024053143
SB2024053144
#VU45702 - Improper Access Control
CVE-2019-0233		 CWE-284 Medium
No
No
 10.0.12 14.08.2020 SB2020081408
SB2022072502
SB2023071310
and 2 more
#VU5234 - Permissions, Privileges, and Access Controls
CVE-2014-0094		 CWE-264 Critical
Available
No
 10.0.12 23.01.2017 SB2014030201
SB2023022233
SB2023071327
and 2 more
#VU49061 - Improper Control of Generation of Code ('Code Injection')
CVE-2012-0392		 CWE-94 High
Available
No
 10.0.12 08.01.2012 SB2012010805
SB20240417121
SB2024053144
#VU49062 - Improper Control of Generation of Code ('Code Injection')
CVE-2012-0391		 CWE-94 High
Available
Exploited
 10.0.12 08.01.2012 SB2012010806
SB20240417121
SB2024053144


Showing elements 1 - 20 out of 41