CVE-2017-1738 — Cross-site Scripting in IBM Rational Quality Manager

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
5.4MEDIUMNVD
CNA6.3
EPSS
0.1%
top 68.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Rational Quality Manager
Timeline
PublishedJul 10
Latest updateMay 13

Description

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 contains an undisclosed vulnerability that would allow an authenticated user to obtain elevated privileges. IBM X-Force ID: 134919.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages2 packages

▶NVDibm/rational_quality_manager5.0 — 5.0.2+1
▶CVEListV5ibm/rational_quality_manager9 versions+8

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-c7jr-x6c5-6hhr: IBM Rational Quality Manager 5↗2022-05-13
▶
CVEList
CVE-2017-1738: IBM Rational Quality Manager 5↗2018-07-10
▶
CVE-2017-1738 — Cross-site Scripting in IBM | cvebase