CVE-2015-0129

Опубликовано: 13 мар. 2015

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager (RQM) 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21696856
Patch
Vendor Advisory
http://www.securitytracker.com/id/1031886
http://www-01.ibm.com/support/docview.wss?uid=swg21696856
Patch
Vendor Advisory
http://www.securitytracker.com/id/1031886

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00166

Низкий

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-76w3-cv8p-grj9

github

больше 3 лет назад