CVE-2008-5325

Опубликовано: 05 дек. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Ссылки

http://secunia.com/advisories/32847
Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK69316
Vendor Advisory
http://www.osvdb.org/50369
Broken Link
http://www.securityfocus.com/bid/32576
Third Party Advisory
VDB Entry
http://secunia.com/advisories/32847
Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg1PK69316
Vendor Advisory
http://www.osvdb.org/50369
Broken Link
http://www.securityfocus.com/bid/32576
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_clearquest:*:*:*:*:*:*:*:*

Версия от 7.0.0.0 (включая) до 7.0.0.4 (исключая)

cpe:2.3:a:ibm:rational_clearquest:*:*:*:*:*:*:*:*

Версия от 7.0.1 (включая) до 7.0.1.3 (исключая)

EPSS

Процентиль: 55%

0.00322

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-qhpw-xfc5-j23j

github

больше 3 лет назад