IBM Security Bulletin: WebSphere Commerce is affected by an information disclosure vulnerability (CVE-2015-0200)

WebSphere Commerece does not properly remove sensitive data from the database after data has been modified. CVE(s):   CVE-2015-0200 Affected product(s) and affected version(s): WebSphere Commerce versions...

from IBM Product Security Incident Response Team http://ift.tt/1JNk5id