漏洞标题
N/A
漏洞描述信息
在IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8、4.0 before 4.0.7 iFix11、5.0 before 5.0.2 iFix18和6.0 before 6.0.2 iFix5之前；IBM Rational Quality Manager 3.0.1.6 before iFix8、4.0 before 4.0.7 iFix11、5.0 before 5.0.2 iFix18和6.0 before 6.0.2 iFix5;IBM Rational Team Concert 3.0.1.6 before iFix8、4.0 before 4.0.7 iFix11、5.0 before 5.0.2 iFix18和6.0 before 6.0.2 iFix5;IBM Rational DOORS Next Generation 4.0 before 4.0.7 iFix11、5.0 before 5.0.2 iFix18和6.0 before 6.0.2 iFix5;IBM Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11、5.0 before 5.0.2 iFix18和6.0 before 6.0.2 iFix5；以及IBM Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11、5.0 before 5.0.2 iFix18和6.0 before 6.0.2 iFix5允许远程登录的用户通过编辑构造好的字段注入任意的网页脚本或HTML。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted field.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
多款IBM产品跨站脚本漏洞
漏洞描述信息
IBM Rational Collaborative Lifecycle Management（CLM）等都是美国IBM公司的产品。IBM Rational CLM、Rational Team Concert（RTC）和Rational Engineering Lifecycle Manager都是协作化生命周期管理解决方案；Rational Quality Manager（RQM）是一套协作的、基于Web的质量管理解决方案；Rational Requirements Composer和Rational
CVSS信息
N/A
漏洞类别
跨站脚本