A vulnerability classified as critical has been found in Magento Community Edition and Enterprise Edition on PHP5. This affects the function
create of the file app/code/core/Mage/Catalog/Model/Product/Api/V2.php. The manipulation of the argument productData leads to improper input validation.
This vulnerability is uniquely identified as CVE-2015-6497. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.
