Description

Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 6.x before 6.0.1 iFix6, Rational Quality Manager 6.x before 6.0.1 iFix6, Rational Team Concert 6.x before 6.0.1 iFix6, Rational DOORS Next Generation 6.x before 6.0.1 iFix6, Rational Engineering Lifecycle Manager 6.x before 6.0.1 iFix6, and Rational Rhapsody Design Manager 6.x before 6.0.1 iFix6 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2016-2986

Related Vulnerabilities

WordPress Plugin SupportCandy Arbitrary File Upload (2.0.0)

WordPress Plugin File Manager Unspecified Vulnerability (5.0.0)

WordPress Plugin Google Maps in Posts Cross-Site Scripting (1.5.3)

WordPress Plugin WordPress Download Manager Cross-Site Request Forgery (2.9.60)

WordPress Plugin Login Block IPs Cross-Site Request Forgery (1.0.0)

Severity

Medium

Classification

CVE-2016-2986 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N

Tags

Missing Update Known Vulnerabilities