CVE-2011-2606 — Cross-site Scripting in IBM Rational Team Concert

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.3%
top 47.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Rational Team Concert
Timeline
PublishedJun 30
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-v2h4-whw2-pm3g: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3↗2022-05-17
▶
CVEList
CVE-2011-2606: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3↗2011-06-30
▶
CVE-2011-2606 — Cross-site Scripting in IBM | cvebase