CVE-2012-2169

Опубликовано: 17 авг. 2012

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote authenticated users to inject arbitrary web script or HTML via the File Description field.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg1PM62762
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21607783
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/75049
http://www-01.ibm.com/support/docview.wss?uid=swg1PM62762
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21607783
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/75049

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_clearquest:7.1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.1.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_clearquest:7.1.2.6:*:*:*:*:*:*:*

EPSS

Процентиль: 41%

0.00188

Низкий

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-rm2j-qj3x-w2rg

github

больше 3 лет назад