Description

Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0122.

Remediation

References

CVE-2015-0123

Related Vulnerabilities

WordPress Plugin WP AutoComplete Search SQL Injection (1.0.4)

WordPress Plugin Advanced Classifieds & Directory Pro Security Bypass (1.6.2)

Ruby Out-of-bounds Read Vulnerability (CVE-2022-28739)

Oracle Database Server CVE-2011-0793 Vulnerability (CVE-2011-0793)

PHP Other Vulnerability (CVE-2007-1884)

Severity

Low

Classification

CVE-2015-0123 CWE-707

Tags

Missing Update Known Vulnerabilities