CVE-2016-2912

published 2016-08-08

CVE-2016-2912: Cross-site scripting (XSS) vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated…

medium 5.4 CVSS 3.0

AV N AC L PR L UI R S C C L I L A N

Cross-site scripting (XSS) vulnerability in the Document Builder in IBM Rational Publishing Engine (aka RPENG) 2.0.1 before ifix002 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ibm	engineering_lifecycle_optimization_publishing	—	—

CWE-79