5.4
CVE-2016-0331
- EPSS 0.8%
- Veröffentlicht 12.09.2016 10:59:00
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
LoginCross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2 iFix2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Rational Collaborative Lifecycle Management Version 6.0.1
Ibm ≫ Rational Collaborative Lifecycle Management Version 6.0.2
Ibm ≫ Rational Team Concert Version 6.0.1
Ibm ≫ Rational Team Concert Version 6.0.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.8% | 0.518 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.4 | 2.3 | 2.7 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
|
| NIST | 3.5 | 6.8 | 2.9 |
AV:N/AC:M/Au:S/C:N/I:P/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
http://www-01.ibm.com/support/docview.wss?uid=swg21989899
http://www.securityfocus.com/bid/92840
http://www.securitytracker.com/id/1036814