4.3

CVE-2012-4839

The OSLC interface in the Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to conduct phishing attacks via a FRAME element.

Data is provided by the National Vulnerability Database (NVD)
IbmRational Clearquest Version7.1.2
IbmRational Clearquest Version7.1.2.1
IbmRational Clearquest Version7.1.2.2
IbmRational Clearquest Version7.1.2.3
IbmRational Clearquest Version7.1.2.4
IbmRational Clearquest Version7.1.2.5
IbmRational Clearquest Version7.1.2.6
IbmRational Clearquest Version7.1.2.7
IbmRational Clearquest Version7.1.2.8
IbmRational Clearquest Version8.0.0
IbmRational Clearquest Version8.0.0.1
IbmRational Clearquest Version8.0.0.2
IbmRational Clearquest Version8.0.0.3
IbmRational Clearquest Version8.0.0.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.23% 0.425
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N