Description

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 145509.

Remediation

References

CVE-2018-1688

Related Vulnerabilities

WordPress Plugin AMP Toolbox Cross-Site Scripting (1.9.4)

WordPress Plugin ProfileGrid-User Profiles, Groups and Communities Privilege Escalation (5.8.9)

WordPress Plugin Poll Maker SQL Injection (3.4.1)

WordPress Plugin Events Search For The Events Calendar Security Bypass (1.1.3)

OpenSSL Cryptographic Issues Vulnerability (CVE-2014-3566)

Severity

Medium

Classification

CVE-2018-1688 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities