CVE-2019-4747: Improper Neutralization of Input During Web Page Generation

IBM Team Concert RTC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172887...

PT-2020-11055

Name of the Vulnerable Software and Affected Versions IBM Team Concert RTC affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

CVE-2018-1766: Improper Neutralization of Input During Web Page Generation

IBM Team Concert RTC 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IB...

PT-2018-14133

Name of the Vulnerable Software and Affected Versions IBM Team Concert RTC versions 5.0 through 5.0.2 IBM Team Concert RTC versions 6.0 through 6.0.5 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to...

CVE-2017-1701: Inadequate Encryption Strength

IBM Team Concert RTC 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption algorithm, which could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 134393...

PT-2018-6384

Name of the Vulnerable Software and Affected Versions: IBM Team Concert RTC versions 5.0 through 6.0.5 Description: The issue allows an authenticated user to obtain highly sensitive information due to the use of a weak encryption algorithm for storing user credentials. Recommendations: For versio...

CVE-2017-1363: Improper Neutralization of Input During Web Page Generation

IBM Team Concert RTC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126856...

PT-2017-12993

Name of the Vulnerable Software and Affected Versions IBM Team Concert RTC affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a trusted...

PT-2017-10299

Name of the Vulnerable Software and Affected Versions IBM Team Concert RTC versions 4.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2017-10306

Name of the Vulnerable Software and Affected Versions IBM Team Concert RTC versions 4.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

CVE-2016-9746: Improper Neutralization of Input During Web Page Generation

IBM Team Concert RTC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119821...

CVE-2016-9733: Improper Neutralization of Input During Web Page Generation

IBM Team Concert RTC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119762...

CVE-2017-1103: Improper Restriction of XML External Entity Reference

IBM Team Concert RTC is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 120665...

PT-2017-11694

Name of the Vulnerable Software and Affected Versions IBM Team Concert RTC affected versions not specified Description The issue is caused by an XML External Entity Injection XXE error when processing XML data, which could allow a remote attacker to expose highly sensitive information or consume...