CVE-2009-2752: IBM WebSphere Commerce

Low severity, CVSS 1.5. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM WebSphere Commerce 7.0 does not properly encrypt data in a database, which makes it easier for local users to obtain sensitive information by defeating cryptographic protection mechanisms.

Affected products

• IBM WebSphere Commerce: version 7.0 only

Published 2010-02-05. Last modified 2026-06-16.