CVE-2016-2926

Опубликовано: 25 нояб. 2016

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Team Concert 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:rational_team_concert:3.0.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.2:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:ibm:rational_quality_manager:3.0.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.2:*:*:*:*:*:*:*

Конфигурация 7

Одно из

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:6.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00541

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-5fvf-2j4c-qgqq

CVSS3: 5.4

github

больше 3 лет назад

EPSS

Процентиль: 67%

0.00541

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79