High severity7.4NVD Advisory· Published Jan 10, 2016· Updated May 6, 2026
CVE-2015-7397
CVE-2015-7397
Description
Multiple open redirect vulnerabilities in the Aurora starter store in IBM WebSphere Commerce 7.0 through Feature Pack 8 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the referrer parameter.
Affected products
1- cpe:2.3:a:ibm:websphere_commerce:7.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- www-01.ibm.com/support/docview.wssnvd
- www.securitytracker.com/id/1034640nvd
News mentions
0No linked articles in our index yet.