IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2607)

Description

Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165513.

Remediation

References

CVE-2011-2607

Related Vulnerabilities

Apache Tomcat Improper Input Validation Vulnerability (CVE-2016-1240)

WordPress Plugin YITH WooCommerce Gift Cards Security Bypass (1.3.7)

Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-12165)

Resin Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2008-2462)

Vanilla Forums Other Vulnerability (CVE-2011-0910)

Severity

Medium

Classification

CVE-2011-2607 CWE-707