CVE-2011-3577: IBM WebSphere Commerce

High severity, CVSS 10.0. EPSS: 2% chance of exploitation in the next 30 days.

IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which has unspecified impact and attack vectors.

Affected products

• IBM WebSphere Commerce: version 6.0.0.0 only; version 6.0.0.1 only; version 6.0.0.2 only; version 6.0.0.3 only; version 6.0.0.4 only; version 6.0.0.5 only; …

Published 2011-09-20. Last modified 2026-06-16.