CVE-2016-0331

Опубликовано: 12 сент. 2016

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2 iFix2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21989899
Patch
Vendor Advisory
http://www.securityfocus.com/bid/92840
http://www.securitytracker.com/id/1036814
http://www-01.ibm.com/support/docview.wss?uid=swg21989899
Patch
Vendor Advisory
http://www.securityfocus.com/bid/92840
http://www.securitytracker.com/id/1036814

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00199

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-mmx6-mg38-r8hm