CVE-2016-6055: Improper Neutralization of Input During Web Page Generation

IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Referen...

PT-2017-8871

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Next Generation versions 4.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

nextdayflyers.com XSS vulnerability

Vulnerable URL: https://www.nextdayflyers.com/secure/login.html?url=%22%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 85845 VIP website...

CVE-2016-6060

An undisclosed vulnerability in IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 could allow a JazzGuest user to see project names. IBM Reference : 1995547...

CVE-2016-6060

CVE-2016-6060 affects IBM Rational DOORS Next Generation (DRN) 4.0–6.0.2 and related 5.x/4.x components. The vulnerability allows a JazzGuest user to see project names without proper permissions (undisclosed root cause). Affected: DRN 6.0–6.0.2, DRN 5.0–5.0.2, Rational Requirements Components 4.0...

CVE-2016-6060

An undisclosed vulnerability in IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 could allow a JazzGuest user to see project names. IBM Reference : 1995547...

CVE-2016-6060: Exposure of Sensitive Information to an Unauthorized Actor

An undisclosed vulnerability in IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 could allow a JazzGuest user to see project names. IBM Reference : 1995547...

PT-2017-8874

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Next Generation versions 4.0 through 6.0 Description An undisclosed issue in IBM Rational DOORS Next Generation could allow a JazzGuest user to see project names. Recommendations For versions 4.0 through 6.0, at the moment,...

CVE-2017-1128

IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-9748

IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further attacks against the system...

Cross site scripting

IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

Cross site scripting

IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2016-9748

The CVE-2016-9748 issue affects IBM Rational DOORS Next Generation (RDNG) and related configurations as described in IBM’s advisory. Affected versions include RDNG 6.0–6.0.2, RDNG 5.0–5.0.2, Rational Requirements Composer 4.0.7. The root cause is the disclosure of sensitive information in error r...

CVE-2017-1127

CVE-2017-1127 affects IBM Rational DOORS Next Generation and related DOORS/RRC components. The connected IBM security bulletin confirms a cross-site scripting (XSS) vulnerability in DNG/RRC Web UI that allows embedding arbitrary JavaScript, potentially leading to credential disclosure within a tr...

CVE-2017-1127

IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2017-1128

IBM DOORS Next Generation (DNG/RRC) versions affected: 4.0, 5.0, and 6.0. The Web UI is vulnerable to cross-site scripting via embedded JavaScript, enabling potential credential disclosure in a trusted session. Root cause: reflected/stored XSS in the Web UI (details are described in the IBM Secur...

PT-2017-10308

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Next Generation versions 5.0 through 6.0 Description The issue discloses sensitive information in error response messages, which could be used for further attacks against the system. Recommendations For versions 5.0 through...

CVE-2017-1128: Improper Neutralization of Input During Web Page Generation

IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

PT-2017-11875

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Next Generation versions 4.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

CVE-2017-1127: Improper Neutralization of Input During Web Page Generation

IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...