Description

Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2 iFix2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Remediation

References

CVE-2016-0331

Related Vulnerabilities

PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-1903)

Python Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2008-1887)

WordPress Plugin Simple Gmail Login Stack Trace Information Disclosure (1.1.3)

WordPress Plugin SiteGround Security Security Bypass (1.2.5)

WordPress Plugin File Groups 'fgid' Parameter SQL Injection (1.1.2)

Severity

Medium

Classification

CVE-2016-0331 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities