CVE-2009-2094: IBM WebSphere Commerce

Low severity, CVSS 1.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local users to obtain sensitive information via unknown vectors.

Affected products

• IBM WebSphere Commerce: version 6.0.0.1 only; version 6.0.0.2 only; version 6.0.0.3 only; version 6.0.0.4 only; version 6.0.0.5 only; version 6.0.0.6 only

Published 2009-08-13. Last modified 2026-06-16.