Description

Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0123.

Remediation

References

CVE-2015-0122

Related Vulnerabilities

XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-11174)

Oracle Database Server CVE-2007-5509 Vulnerability (CVE-2007-5509)

WordPress Plugin Store Locator Plus for WordPress Cross-Site Scripting (4.5.10)

Joomla Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2020-15697)

MySQL CVE-2020-2903 Vulnerability (CVE-2020-2903)

Severity

Low

Classification

CVE-2015-0122 CWE-707

Tags

Missing Update Known Vulnerabilities