CVE-2016-2986 — Cross-site Scripting in IBM Rational Doors Next Generation

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
5.4MEDIUMNVD
EPSS
0.2%
top 61.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
IBM Rational Doors Next GenerationIBM Rational Engineering Lifecycle ManagerIBM Rational Quality Manager+2 more
Timeline
PublishedNov 25
Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 6.x before 6.0.1 iFix6, Rational Quality Manager 6.x before 6.0.1 iFix6, Rational Team Concert 6.x before 6.0.1 iFix6, Rational DOORS Next Generation 6.x before 6.0.1 iFix6, Rational Engineering Lifecycle Manager 6.x before 6.0.1 iFix6, and Rational Rhapsody Design Manager 6.x before 6.0.1 iFix6 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages5 packages

▶NVDibm/rational_rhapsody_design_manager6.0.0, 6.0.1, 6.0.2+2
▶NVDibm/rational_quality_manager6.0.0, 6.0.1, 6.0.2+2
▶NVDibm/rational_doors_next_generation6.0.0, 6.0.1, 6.0.2+2
▶NVDibm/rational_team_concert6.0.0, 6.0.1, 6.0.2+2

🔴Vulnerability Details

2
GHSA
GHSA-m2mm-q2w8-mmq6: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 6↗2022-05-17
▶
CVEList
CVE-2016-2986: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 6↗2016-11-25
▶
CVE-2016-2986 — Cross-site Scripting in IBM | cvebase