IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data performing of unauthorized administrative operations and potentially causing a denial of service.