CVE-2017-1113

IBM Rational Team Concert RTC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2016-9733

IBM Team Concert (RTC) is affected by multiple cross-site scripting vulnerabilities, including CVE-2016-9733, in the Web UI across RTC 4.0–6.0.x. The root cause is XSS in the Web UI that can allow injected JavaScript to run in a trusted session, potentially leading to credential disclosure. Remed...

CVE-2016-9746

IBM Team Concert (RTC) is affected by cross-site scripting in its Web UI across Rational Collaborative Lifecycle Management 4.0–6.0.3 and RTC 4.0–6.0.3. The IBM Security Bulletin (D6F8507E.../IBM) details multiple XSS vulnerabilities (including CVE-2016-9746) allowing arbitrary JavaScript executi...

CVE-2016-9733

IBM Team Concert RTC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119762...

CVE-2017-1113

Affected software: IBM Rational Team Concert (RTC) and Rational CLM 4.0–6.0.3. Issue: cross-site scripting in the Web UI that allows embedding arbitrary JavaScript, potentially causing credentials disclosure within a trusted session. Affected components: RTC/CLM Web UI across 4.x–6.0.x line (RTC ...

CVE-2016-9701

CVE-2016-9701 affects IBM Team Concert / Rational Team Concert (RTC) across multiple releases (RTC 4.0–6.0.x; Rational CLM 4.0–6.0.3). The vulnerability is a cross‑site scripting flaw in the Web UI that lets an attacker embed arbitrary JavaScript, potentially altering functionality and leading to...

CVE-2016-9746

IBM Team Concert RTC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119821...

CVE-2016-9701

IBM Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119529...

IBM Rational Team Concert Cross-Site Scripting Vulnerability (CNVD-2017-15922)

IBM Rational Team Concert RTC is the U.S. IBM's set of Jazz-based platform and support decentralized teams for real-time collaboration related to software lifecycle management solutions. A cross-site scripting vulnerability exists in IBM RTC. A remote attacker can exploit this vulnerability to...

CVE-2016-9733: Improper Neutralization of Input During Web Page Generation

IBM Team Concert RTC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119762...

CVE-2016-9746: Improper Neutralization of Input During Web Page Generation

IBM Team Concert RTC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119821...

IBM Rational Team Concert Cross-Site Scripting Vulnerability (CNVD-2017-15923)

IBM Rational Team Concert RTC is the U.S. IBM's set of Jazz-based platform and support for decentralized teams for real-time collaboration related to software lifecycle management solutions. A cross-site scripting vulnerability exists in IBM RTC. A remote attacker can exploit this vulnerability t...

CVE-2017-1113: Improper Neutralization of Input During Web Page Generation

IBM Rational Team Concert RTC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2016-9701: Improper Neutralization of Input During Web Page Generation

IBM Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119529...

IBM Rational Team Concert Cross-Site Scripting Vulnerability (CNVD-2017-15921)

IBM Rational Team Concert RTC is the U.S. IBM's set of Jazz-based platform and support decentralized teams for real-time collaboration related to software lifecycle management solutions. A cross-site scripting vulnerability exists in IBM RTC. A remote attacker can exploit this vulnerability to...

philadelphiaboxoffice.com XSS vulnerability

Vulnerable URL: https://www.philadelphiaboxoffice.com/tickets.php?/Queen-and-Adam-Lambert/Wells-Fargo-CenterPA-PA/=1"...

IBM Rational Team Concert HTML Injection Vulnerability (CNVD-2017-10396 )

IBM Rational Team Concert RTC is the U.S. IBM's set of Jazz-based platform and support for decentralized teams for real-time collaboration related to software lifecycle management solutions. An HTML injection vulnerability exists in IBM RTC. A remote attacker could exploit this vulnerability by...

IBM Rational Team Concert XML External Entity Injection Vulnerability

IBM Rational Team Concert RTC is the U.S. IBM's set of Jazz-based platform and support for decentralized teams for real-time collaboration related to software lifecycle management solutions. An XML external entity injection vulnerability exists in IBM RTC. A remote attacker could exploit this...

Design/Logic Flaw

IBM Rational Team Concert RTC is vulnerable to HTML injection. A remote attacker with project administrator privileges could send a project that contains malicious HTML code, which when the project is viewed, would be executed in the victim's Web browser within the security context of the hosting...

CVE-2016-6037

IBM Rational Team Concert RTC is vulnerable to HTML injection. A remote attacker with project administrator privileges could send a project that contains malicious HTML code, which when the project is viewed, would be executed in the victim's Web browser within the security context of the hosting...