CVE-2017-1790

CWE-79 — Cross-site Scripting (XSS)5 documents4 sources
Severity
5.4MEDIUM
EPSS
0.2%
top 58.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Rational Doors Next GenerationIBM Rational Requirements Composer
Timeline
PublishedApr 12
Latest updateMay 14

Description

IBM DOORS Next Generation (DNG/RRC) 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 137035.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages3 packages

▶CVEListV5ibm/rational_doors_next_generation9 versions+8
▶NVDibm/rational_requirements_composer5.0, 5.0.1, 5.0.2+2

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rw6p-phjr-6cx7: IBM DOORS Next Generation (DNG/RRC) 5↗2022-05-14
▶
CVEList
CVE-2017-1790: IBM DOORS Next Generation (DNG/RRC) 5↗2018-04-12
▶

💬Community

2
Bugzilla
CVE-2017-10086 Oracle JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)↗2017-07-19
▶
Bugzilla
CVE-2017-10114 Oracle JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)↗2017-07-19
▶