Cross site scripting

2018-07-1914:29:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.2%

JSON

IBM Rational Rhapsody Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 and IBM Rational Software Architect Design Manager 5.0 through 5.0.2 and 6.0 through 6.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 143498.

CPENameOperatorVersion
rational_rhapsody_design_managerge5.0
rational_rhapsody_design_managerle5.0.2
rational_rhapsody_design_managerge6.0
rational_rhapsody_design_managerle6.0.5
rational_software_architect_design_managerge5.0
rational_software_architect_design_managerle5.0.2
rational_software_architect_design_managerge6.0
rational_software_architect_design_managerle6.0.1

Name	Operator	Version
rational_rhapsody_design_manager	ge	5.0
rational_rhapsody_design_manager	le	5.0.2
rational_rhapsody_design_manager	ge	6.0
rational_rhapsody_design_manager	le	6.0.5
rational_software_architect_design_manager	ge	5.0
rational_software_architect_design_manager	le	5.0.2
rational_software_architect_design_manager	ge	6.0
rational_software_architect_design_manager	le	6.0.1