CVE-2009-2751: IBM WebSphere Commerce

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which has unspecified impact and remote attack vectors.

Affected products

• IBM WebSphere Commerce: version 7.0 only

Published 2010-02-05. Last modified 2026-06-16.