CVE-2015-0125

Опубликовано: 18 мар. 2015

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 4.x before 4.0.7 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21697297
Patch
Vendor Advisory
http://www.securityfocus.com/bid/73105
http://www-01.ibm.com/support/docview.wss?uid=swg21697297
Patch
Vendor Advisory
http://www.securityfocus.com/bid/73105

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_requirements_composer:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00166

Низкий

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-657f-4666-crj7

github

больше 3 лет назад