Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s.com/bid/98019 - http://www.securitytracker.com/id/1038358 - https://www.kb.cert.org/vuls/id/676632 - http://packetstormsecurity.com/files/152786/Lotus-Domino-8.5.3-EXAMINE-Stack-Buffer-Overflow.html
CVE ID: CVE-2017-1275 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-16T19:40:38.094Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124750. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/124750 - https://www-prd-trops.events.ibm.com/node/715749
CVE ID: CVE-2017-1276 State: PUBLISHED Published: 2017-06-12T19:00:00 Last Updated: 2024-08-05T13:25:17.576Z Vendors: IBM Products: Rational DOORS Next Generation, Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124751. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22002809 - http://www.securityfocus
- CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22002809 - http://www.securityfocus.com/bid/99000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/124751
CVE ID: CVE-2017-1277 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-17T01:50:48.018Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124752. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/124752 - https://www-prd-trops.events.ibm.com/node/715749
CVE ID: CVE-2017-1278 State: PUBLISHED Published: 2017-06-12T19:00:00 Last Updated: 2024-08-05T13:32:27.907Z Vendors: IBM Products: Rational DOORS Next Generation , Rational DOORS Next Generation Problem Types: Gain Access Description: IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124756. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22002809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/124756 - http
p://www.ibm.com/support/docview.wss?uid=swg22002809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/124756 - http://www.securityfocus.com/bid/98994
CVE ID: CVE-2017-1279 State: PUBLISHED Published: 2018-01-26T21:00:00Z Last Updated: 2024-09-16T20:53:07.404Z Vendors: IBM Products: Tealeaf Customer Experience Problem Types: Obtain Information Description: IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 124757. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/124757 - http://www.ibm.com/support/docview.wss?uid=swg22006392
CVE ID: CVE-2017-1280 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-16T20:42:05.386Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124758. Additional Analyst Notes: - CVE Program Container: References: - https://www-prd-trops.events.ibm.com/node/715749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/124758
CVE ID: CVE-2017-1281 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-16T16:38:07.993Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124759. Additional Analyst Notes: - CVE Program Container: References: - https://www-prd-trops.events.ibm.com/node/715749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/124759
CVE ID: CVE-2017-1282 State: PUBLISHED Published: 2017-05-22T20:00:00 Last Updated: 2024-08-05T13:32:27.886Z Vendors: IBM Corporation Products: Content Navigator Problem Types: Cross-Site Scripting Description: IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 124760. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22002356 - http://www.securityfocus.com/bid/98563
CVE ID: CVE-2017-1283 State: PUBLISHED Published: 2017-11-27T21:00:00Z Last Updated: 2024-09-16T16:14:15.714Z Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a shared memory leak by MQ applications using dynamic queues, which can lead to lack of resources for other MQ applications. IBM X-Force ID: 125144. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22003852 - https://exchange.xforce.ibmcloud.com/vulnerabilities/125144
CVE ID: CVE-2017-1284 State: PUBLISHED Published: 2017-07-10T16:00:00Z Last Updated: 2024-09-16T21:09:05.853Z Vendors: IBM Products: MQ Problem Types: Obtain Information Description: IBM WebSphere MQ 9.0.1 and 9.0.2 could allow a local user with ability to run or enable trace, to obtain sensitive information from WebSphere Application Server traces including user credentials. IBM X-Force ID: 125145. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22003851 - https://exchange.xforce.ibmcloud.com/vulnerabilities/125145 - http://www.securityfocus.com/bid/99494
CVE ID: CVE-2017-1285 State: PUBLISHED Published: 2017-07-12T17:00:00Z Last Updated: 2024-09-16T20:02:13.078Z Vendors: IBM Products: MQ Problem Types: Denial of Service Description: IBM WebSphere MQ 9.0.1 and 9.0.2 could allow an authenticated user with authority to send a specially crafted message that would cause a channel to remain in a running state but not process messages. IBM X-Force ID: 125146. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/125146 - https://www.ibm.com/support/docview.wss?uid=swg22003856 - http://www.securityfocus.com/bid/99538
CVE ID: CVE-2017-1286 State: PUBLISHED Published: 2018-08-13T16:00:00 Last Updated: 2024-08-05T13:32:28.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user who has been given elevated permissions in the UI, even after those elevated permissions have been revoked. IBM X-Force ID: 125147. Additional Analyst Notes: - CVE Program Container: References: - https://www.ibm.com/support/docview.wss?uid=swg2C1000377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/125147
CVE ID: CVE-2017-1287 State: PUBLISHED Published: 2017-07-24T21:00:00Z Last Updated: 2024-09-16T17:17:35.926Z Vendors: IBM Products: Rational Rhapsody Design Manager Problem Types: Gain Access Description: IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. Additional Analyst Notes: - CVE Program Cont
highly sensitive information or conduct further attacks against the victim. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/125148 - http://www.ibm.com/support/docview.wss?uid=swg22006052
CVE ID: CVE-2017-1289 State: PUBLISHED Published: 2017-05-22T20:00:00 Last Updated: 2024-08-05T13:32:27.879Z Vendors: IBM Corporation Products: Runtimes for Java Technology Problem Types: Obtain Information Description: IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1221 - https://access.redhat.com/errata/RHSA-2017:1220 - https://www.ibm.com/support/docview.wss?uid=swg22002169 -
-2017:1221 - https://access.redhat.com/errata/RHSA-2017:1220 - https://www.ibm.com/support/docview.wss?uid=swg22002169 - https://access.redhat.com/errata/RHSA-2017:1222 - http://www.securityfocus.com/bid/98401 - https://access.redhat.com/errata/RHSA-2017:3453
CVE ID: CVE-2017-1290 State: PUBLISHED Published: 2017-11-01T21:00:00Z Last Updated: 2024-09-17T04:14:40.859Z Vendors: IBM Products: OpenPages GRC Platform Problem Types: Cross-Site Scripting Description: IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125151. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22009770 - http://www.securityfocus.com/bid/101684 - https://exchange.xforce.ibmcl
ww.ibm.com/support/docview.wss?uid=swg22009770 - http://www.securityfocus.com/bid/101684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/125151
CVE ID: CVE-2017-1291 State: PUBLISHED Published: 2017-05-26T16:00:00 Last Updated: 2024-08-05T13:32:28.511Z Vendors: IBM Products: Maximo Asset Management Problem Types: Gain Access Description: IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 125152. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/su
ormation. IBM X-Force ID: 125152. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22003413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/125152
CVE ID: CVE-2017-1292 State: PUBLISHED Published: 2017-05-26T16:00:00 Last Updated: 2024-08-05T13:32:29.409Z Vendors: IBM Products: Maximo Asset Management Problem Types: Obtain Information Description: IBM Maximo Asset Management 7.5 and 7.6 generates error messages that could reveal sensitive information that could be used in further attacks against the system. IBM X-Force ID: 125153. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/125153 - http://www.ibm.com/support/docview.wss?uid=swg22003414
CVE ID: CVE-2017-1293 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-16T19:40:51.723Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125154. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/125154 - https://www-prd-trops.events.ibm.com/node/715749
CVE ID: CVE-2017-1294 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-17T01:45:44.586Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Collaborative Lifecycle Management, Rational Quality Manager Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-
thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125155. Additional Analyst Notes: - CVE Program Container: References: - https://www-prd-trops.events.ibm.com/node/715749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/125155
CVE ID: CVE-2017-1295 State: PUBLISHED Published: 2017-10-25T12:00:00Z Last Updated: 2024-09-16T19:57:35.000Z Vendors: IBM Products: Rational Collaborative Lifecycle Management Problem Types: Obtain Information Description: IBM RSA DM contains unspecified vulnerability in CLM Applications with potential for information leakage. IBM X-Force ID: 125157. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/125157 - http://www.ibm.com/support/docview.wss?uid=swg22009296
CVE ID: CVE-2017-1297 State: PUBLISHED Published: 2017-06-27T16:00:00 Last Updated: 2024-08-05T13:32:28.490Z Vendors: IBM Products: DB2 for Linux, UNIX and Windows Problem Types: Gain Privileges Description: IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code. IBM X-Force ID: 125159. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99271 - https://exchange.xforce.ibmcloud.com/vulnerabilities/125159 - http://www.ibm.com/support/docview.wss?uid=swg22004878 - http:/
://exchange.xforce.ibmcloud.com/vulnerabilities/125159 - http://www.ibm.com/support/docview.wss?uid=swg22004878 - http://www.securitytracker.com/id/1038772 - https://www.exploit-db.com/exploits/42260/
CVE ID: CVE-2017-1298 State: REJECTED Published: 2017-04-28T17:00:00 Last Updated: 2017-05-03T12:57:01 Description: No description available.
CVE ID: CVE-2017-1299 State: PUBLISHED Published: 2018-07-03T19:00:00 Last Updated: 2024-08-05T13:32:29.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125161. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/125161 - https://www-prd-trops.even
rogram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/125161 - https://www-prd-trops.events.ibm.com/node/715749
CVE ID: CVE-2017-1300 State: PUBLISHED Published: 2017-11-01T21:00:00Z Last Updated: 2024-09-16T20:27:31.753Z Vendors: IBM Products: OpenPages GRC Platform Problem Types: Gain Access Description: IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 125162. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/101939 - http://www.ibm.com/support/docview.wss?uid=swg22009684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/125162
CVE ID: CVE-2017-1301 State: PUBLISHED Published: 2017-10-05T17:00:00Z Last Updated: 2024-09-17T01:56:53.219Z Vendors: IBM Products: Spectrum Protect Problem Types: Obtain Information Description: IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the system, which could allow the attacker to overwrite arbitrary files on the system with elevated privileges. IBM X-Force ID: 125163. Additional Analyst Notes: - CVE Program Container: References: - http://www.ib
vated privileges. IBM X-Force ID: 125163. Additional Analyst Notes: - CVE Program Container: References: - http://www.ibm.com/support/docview.wss?uid=swg22006248 - http://www.securityfocus.com/bid/101107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/125163
CVE ID: CVE-2017-1302 State: PUBLISHED Published: 2017-06-23T16:00:00 Last Updated: 2024-08-05T13:32:29.544Z Vendors: IBM Products: Sterling B2B Integrator Problem Types: Obtain Information Description: IBM Sterling B2B Integrator Standard Edition 5.2 could allow a local user view sensitive information due to improper access controls. IBM X-Force ID: 125456. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99238 - https://exchange.xforce.ibmcloud.com/vulnerabilities/125456 - http://www.ibm.com/support/docview.wss?uid=swg22004202
CVE ID: CVE-2017-1303 State: PUBLISHED Published: 2017-07-31T21:00:00Z Last Updated: 2024-09-16T17:53:12.009Z Vendors: IBM Products: WebSphere Portal Problem Types: Cross-Site Scripting Description: IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125457. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/125457 - http://www.ibm.com/support/docview.wss?uid=swg220
ences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/125457 - http://www.ibm.com/support/docview.wss?uid=swg22004979 - http://www.securityfocus.com/bid/100007
CVE ID: CVE-2017-1304 State: PUBLISHED Published: 2017-06-21T18:00:00 Last Updated: 2024-08-05T13:32:29.316Z Vendors: IBM Products: Elastic Storage Server Problem Types: Denial of Service Description: IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS) during testing of an unsupported configuration, where users applications are running on an active ESS I/O server node and utilize direct I/O to perform a read or a write to a Spectrum Scale file. This vulnerability may result in the use of an incorrect memory address, leading to a Spectrum Scale/GPFS daemon failure with a Signal 11, and possibly leading to denia
ncorrect memory address, leading to a Spectrum Scale/GPFS daemon failure with a Signal 11, and possibly leading to denial of service or undetected data corruption. IBM X-Force ID: 125458. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/125458 - http://www.ibm.com/support/docview.wss?uid=ssg1S1010230 - http://www.securityfocus.com/bid/99274
CVE ID: CVE-2017-1305 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-05T13:32:29.310Z Vendors: IBM Products: Rational DOORS Next Generation Problem Types: Cross-Site Scripting Description: IBM DOORS Next Generation (DNG/RRC) 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125459. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/125459 - http://www.
es: - http://www.securityfocus.com/bid/98834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/125459 - http://www.ibm.com/support/docview.wss?uid=swg22002799
CVE ID: CVE-2017-1306 State: PUBLISHED Published: 2018-07-03T19:00:00Z Last Updated: 2024-09-17T00:06:52.525Z Severity: MEDIUM (CVSS 5.4 CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:H/RC:C/RL:O) Vendors: IBM Products: Rational Quality Manager, Rational Collaborative Lifecycle Management Problem Types: Cross-Site Scripting Description: IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-