Lucene search

[email protected]NVD:CVE-2016-2864

HistoryNov 24, 2016 - 7:59 p.m.

CVE-2016-2864

2016-11-2419:59:11

CWE-79

[email protected]

web.nvd.nist.gov

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.7%

JSON

Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected configurations

NVD

Node

ibmrational_quality_managerMatch3.0.1.6

ibmrational_quality_managerMatch4.0.0

ibmrational_quality_managerMatch4.0.1

ibmrational_quality_managerMatch4.0.2

ibmrational_quality_managerMatch4.0.3

ibmrational_quality_managerMatch4.0.4

ibmrational_quality_managerMatch4.0.5

ibmrational_quality_managerMatch4.0.6

ibmrational_quality_managerMatch4.0.7

ibmrational_quality_managerMatch5.0.0

ibmrational_quality_managerMatch5.0.1

ibmrational_quality_managerMatch5.0.2

ibmrational_quality_managerMatch6.0.0

ibmrational_quality_managerMatch6.0.1

ibmrational_quality_managerMatch6.0.2

Node

ibmrational_engineering_lifecycle_managerMatch4.0.0

ibmrational_engineering_lifecycle_managerMatch4.0.1

ibmrational_engineering_lifecycle_managerMatch4.0.2

ibmrational_engineering_lifecycle_managerMatch4.0.3

ibmrational_engineering_lifecycle_managerMatch4.0.4

ibmrational_engineering_lifecycle_managerMatch4.0.5

ibmrational_engineering_lifecycle_managerMatch4.0.6

ibmrational_engineering_lifecycle_managerMatch4.0.7

ibmrational_engineering_lifecycle_managerMatch5.0.0

ibmrational_engineering_lifecycle_managerMatch5.0.1

ibmrational_engineering_lifecycle_managerMatch5.0.2

ibmrational_engineering_lifecycle_managerMatch6.0.0

ibmrational_engineering_lifecycle_managerMatch6.0.1

ibmrational_engineering_lifecycle_managerMatch6.0.2

Node

ibmrational_team_concertMatch3.0.1.6

ibmrational_team_concertMatch4.0.0

ibmrational_team_concertMatch4.0.1

ibmrational_team_concertMatch4.0.2

ibmrational_team_concertMatch4.0.3

ibmrational_team_concertMatch4.0.4

ibmrational_team_concertMatch4.0.5

ibmrational_team_concertMatch4.0.6

ibmrational_team_concertMatch4.0.7

ibmrational_team_concertMatch5.0.0

ibmrational_team_concertMatch5.0.1

ibmrational_team_concertMatch5.0.2

ibmrational_team_concertMatch6.0.0

ibmrational_team_concertMatch6.0.1

ibmrational_team_concertMatch6.0.2

Node

ibmrational_collaborative_lifecycle_managementMatch3.0.1.6

ibmrational_collaborative_lifecycle_managementMatch4.0.0

ibmrational_collaborative_lifecycle_managementMatch4.0.1

ibmrational_collaborative_lifecycle_managementMatch4.0.2

ibmrational_collaborative_lifecycle_managementMatch4.0.3

ibmrational_collaborative_lifecycle_managementMatch4.0.4

ibmrational_collaborative_lifecycle_managementMatch4.0.5

ibmrational_collaborative_lifecycle_managementMatch4.0.6

ibmrational_collaborative_lifecycle_managementMatch4.0.7

ibmrational_collaborative_lifecycle_managementMatch5.0.0

ibmrational_collaborative_lifecycle_managementMatch5.0.1

ibmrational_collaborative_lifecycle_managementMatch5.0.2

ibmrational_collaborative_lifecycle_managementMatch6.0.0

ibmrational_collaborative_lifecycle_managementMatch6.0.1

ibmrational_collaborative_lifecycle_managementMatch6.0.2

Node

ibmrational_rhapsody_design_managerMatch4.0

ibmrational_rhapsody_design_managerMatch4.0.1

ibmrational_rhapsody_design_managerMatch4.0.2

ibmrational_rhapsody_design_managerMatch4.0.3

ibmrational_rhapsody_design_managerMatch4.0.4

ibmrational_rhapsody_design_managerMatch4.0.5

ibmrational_rhapsody_design_managerMatch4.0.6

ibmrational_rhapsody_design_managerMatch4.0.7

ibmrational_rhapsody_design_managerMatch5.0.0

ibmrational_rhapsody_design_managerMatch5.0.1

ibmrational_rhapsody_design_managerMatch5.0.2

ibmrational_rhapsody_design_managerMatch6.0.0

ibmrational_rhapsody_design_managerMatch6.0.1

ibmrational_rhapsody_design_managerMatch6.0.2

Node

ibmrational_doors_next_generationMatch4.0.0

ibmrational_doors_next_generationMatch4.0.1

ibmrational_doors_next_generationMatch4.0.2

ibmrational_doors_next_generationMatch4.0.3

ibmrational_doors_next_generationMatch4.0.4

ibmrational_doors_next_generationMatch4.0.5

ibmrational_doors_next_generationMatch4.0.6

ibmrational_doors_next_generationMatch4.0.7

ibmrational_doors_next_generationMatch5.0.0

ibmrational_doors_next_generationMatch5.0.1

ibmrational_doors_next_generationMatch5.0.2

ibmrational_doors_next_generationMatch6.0.0

ibmrational_doors_next_generationMatch6.0.1

ibmrational_doors_next_generationMatch6.0.2

Node

ibmrational_software_architect_design_managerMatch4.0.0

ibmrational_software_architect_design_managerMatch4.0.1

ibmrational_software_architect_design_managerMatch4.0.2

ibmrational_software_architect_design_managerMatch4.0.3

ibmrational_software_architect_design_managerMatch4.0.4

ibmrational_software_architect_design_managerMatch4.0.5

ibmrational_software_architect_design_managerMatch4.0.6

ibmrational_software_architect_design_managerMatch4.0.7

ibmrational_software_architect_design_managerMatch5.0.0

ibmrational_software_architect_design_managerMatch5.0.1

ibmrational_software_architect_design_managerMatch5.0.2

ibmrational_software_architect_design_managerMatch6.0.0

ibmrational_software_architect_design_managerMatch6.0.1

ibmrational_software_architect_design_managerMatch6.0.2

References

www-01.ibm.com/support/docview.wss?uid=swg21991478

www.securityfocus.com/bid/94542

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.7%

JSON

Related for NVD:CVE-2016-2864

cve1 cvelist1 prion1 ibm1