CVE-2016-2914: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in the Document Builder in IBM Rational Publishing Engine aka RPENG 2.0.1 before ifix002 allows remote authenticated users to execute arbitrary code by specifying an unexpected file extension...

PT-2016-5274

Name of the Vulnerable Software and Affected Versions IBM Rational Publishing Engine version 2.0.1 before ifix002 Description A cross-site scripting XSS issue exists in the Document Builder of IBM Rational Publishing Engine, allowing remote authenticated users to inject arbitrary web script or HT...

CVE-2016-2912: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Document Builder in IBM Rational Publishing Engine aka RPENG 2.0.1 before ifix002 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2016-5275

Name of the Vulnerable Software and Affected Versions IBM Rational Publishing Engine version 2.0.1 before ifix002 Description The issue concerns an unrestricted file upload vulnerability in the Document Builder component. This allows remote authenticated users to execute arbitrary code by...