Description
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 148615.
Remediation
References
Related Vulnerabilities
Apache Tomcat Uncontrolled Resource Consumption Vulnerability (CVE-2019-0199)
WordPress Plugin Slimstat Analytics Cross-Site Scripting (2.8.4)
WordPress Plugin Appointment Booking Calendar Multiple Vulnerabilities (1.1.24)
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-7832)