NVD

Id
22657  
Name
CVE-2015-0130  
Description
Cross-site scripting (XSS) vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Quality Manager (RQM) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Team Concert (RTC) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Requirements Composer (RRC) 4.x through 4.0.7; and Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-07-19  
Modified Date
2015-07-20  
Seq
2015-0130  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
119814 22657 CVE-2015-0130 http://www-01.ibm.com/support/docview.wss?uid=swg21960407  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8541 JVNDB-2015-003861 複数の IBM Rational 製品の Jazz Foundation の Jazz Team Server におけるクロスサイトスクリプティングの脆弱性 複数の IBM Rational 製品の Jazz Foundation の Jazz Team Server には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-0130 77341 CVE-2015-0130 22657 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003861.html 2015-06-26 2015-07-23 View