CVE-2009-2094

Severity: low (CVSS 1.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-08-13 · updated 2026-06-16

Description

Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local users to obtain sensitive information via unknown vectors.

Affected products

IBM WebSphere Commerce Enterprise: 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.0.0.4, 6.0.0.5, 6.0.0.6

References

http://publib.boulder.ibm.com/infocenter/wchelp/v6r0m0/topic/com.ibm.commerce.admin.doc/refs/rig_new_and_changed.htm
http://www-1.ibm.com/support/docview.wss?uid=swg1LI74286
https://exchange.xforce.ibmcloud.com/vulnerabilities/52398
http://publib.boulder.ibm.com/infocenter/wchelp/v6r0m0/topic/com.ibm.commerce.admin.doc/refs/rig_new_and_changed.htm
http://www-1.ibm.com/support/docview.wss?uid=swg1LI74286
https://exchange.xforce.ibmcloud.com/vulnerabilities/52398

Get alerted when CVE-2009-2094 or the next vulnerability affects your stack