CVE-2018-1808: IBM WebSphere Commerce

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input control. IBM X-Force ID: 149828.

Affected products

• IBM WebSphere Commerce: from 9.0.0.0, up to and including 9.0.0.6

Published 2018-11-13. Last modified 2026-06-17.