漏洞标题
N/A
漏洞描述信息
IBM Rational Quality Manager 4.0、5.0 和 6.0 存在跨站点脚本攻击的漏洞。这个漏洞允许用户在 Web 用户界面嵌入任意 JavaScript 代码,从而更改预期的功能,可能导致信任会话中的身份泄露。IBM 参考 #:2000784。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 2000784.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
多款IBM Rational产品Jazz Team Server跨站脚本漏洞
漏洞描述信息
IBM Rational Collaborative Lifecycle Management(CLM)等都是美国IBM公司的产品。IBM Rational CLM、Rational Team Concert(RTC)和Rational Engineering Lifecycle Manager(RELM)都是协作化生命周期管理解决方案;Rational Requirements Composer(RRC)和Rational DOORS Next Generation(RDNG)都是需求管理解决方案。Ja
CVSS信息
N/A
漏洞类别
跨站脚本