CVE-2017-1169

IBM DOORS next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123188...

CVE-2017-1363

IBM Team Concert RTC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126856...

Cross site scripting

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036...

CVE-2017-1164

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036...

CVE-2017-1164

CVE-2017-1164 is an IBM Jazz Foundation cross-site scripting vulnerability. The IBM bulletin groups it with multiple vulnerabilities affecting IBM Jazz Team Server products (CLM, RDNG, RELM, RTC, RQM, Rhapsody DM, RSA DM) and confirms the issue as a reflected web UI XSS that can lead to credentia...

CVE-2017-1169

CVE-2017-1169 affects IBM Rational DOORS Next Generation (DNG/RRC). The issue is a cross-site scripting vulnerability in the Web UI that allows an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The IBM Security Bulletin enumerates a...

CVE-2017-1169

IBM DOORS next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123188...

CVE-2017-1363

CVE-2017-1363 is an XSS vulnerability in IBM Team Concert (RTC) where arbitrary JavaScript could be injected into the Web UI, potentially leading to credentials disclosure within a trusted session. Connected sources confirm affected products include Rational Collaborative Lifecycle Management sui...

CVE-2017-1363

IBM Team Concert RTC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126856...

PT-2017-12993

Name of the Vulnerable Software and Affected Versions IBM Team Concert RTC affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted...

CVE-2017-1169: Improper Neutralization of Input During Web Page Generation

IBM DOORS next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123188...

CVE-2017-1363: Improper Neutralization of Input During Web Page Generation

IBM Team Concert RTC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126856...

CVE-2017-1164: Improper Neutralization of Input During Web Page Generation

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036...

PT-2017-12179

Name of the Vulnerable Software and Affected Versions IBM DOORS next Generation DNG/RRC affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within...

PT-2017-12143

Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

CVE-2017-1209

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Cross site scripting

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Mikogo 5.4.1.160608 Local Credentials Disclosure

!/usr/bin/env python Mikogo 5.4.1.160608 Local Credentials Disclosure Vendor: Snapview GmbH Product web page: https://www.mikogo.com Affected version: 5.4.1.160608 Summary: Mikogo is a desktop sharing software application for web conferencing and remote support, and is provided by the online...

Mikogo 5.4.1.160608 - Local Credentials Disclosure Exploit

Exploit for windows platform in category local exploits !/usr/bin/env python Mikogo 5.4.1.160608 Local Credentials Disclosure Vendor: Snapview GmbH Product web page: https://www.mikogo.com Affected version: 5.4.1.160608 Summary: Mikogo is a desktop sharing software application for web conferencin...

CVE-2017-1209: Improper Neutralization of Input During Web Page Generation

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...