CVE-2017-1607

CVE-2017-1607 affects IBM DOORS Next Generation (DNG/RRC) 6.0. The flaw is a cross-site scripting vulnerability in the Web UI caused by insufficient input validation, enabling arbitrary JavaScript execution and potentially credentials disclosure in a trusted session. IBM’s connected bulletin show...

CVE-2017-1689

The CVE-2017-1689 issue affects IBM Rational DOORS Next Generation (DNG/RRC) 6.0 (and includes 6.0.0–6.0.4 as stated in the IBM bulletin). It is a Cross-Site Scripting vulnerability in the Web UI that allows an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure ...

CVE-2017-1650

This CVE applies to IBM DOORS Next Generation (DNG/RRC) 6.0 and its 6.0.x releases, where a cross-site scripting flaw in the Web UI could let an attacker inject arbitrary JavaScript and potentially disclose credentials in a trusted session. The root cause is improper input validation in the Web U...

CVE-2017-1461

IBM DOORS Next Generation (DNG/RRC) versions 4.0–6.0 are vulnerable to cross-site scripting in the Web UI, enabling an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The issue affects Rational DOORS Next Generation 6.0–6.0.4, Rational Requir...

CVE-2017-1678

CVE-2017-1678 affects IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0; the vulnerability is a cross-site scripting flaw in the Web UI that can lead to credentials disclosure within a trusted session. Remediation is available by upgrading to fixed builds: 6.0.2 iFix014 or later, 6.0.3 iFix00...

CVE-2017-1688

IBM DOORS Next Generation (DNG/RRC) 6.0 is affected by a cross-site scripting vulnerability in the Web UI that can allow an attacker to inject arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. The issue targets the Web UI component of DNG/RRC 6.0 (and 6....

CVE-2017-1688

IBM DOORS Next Generation DNG/RRC 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134063...

CVE-2017-1593

IBM DOORS Next Generation (DNG/RRC) versions affected: 4.0, 5.0, and 6.0 (including DOORS Next Generation 6.0–6.0.4; Rational Requirements Composer 4.0–5.0) are exposed to a cross-site scripting (XSS) vulnerability in the Web UI that can allow arbitrary JavaScript to be executed in a trusted sess...

CVE-2017-1593

IBM DOORS Next Generation DNG/RRC 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2017-1678

IBM DOORS Next Generation DNG/RRC 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2017-1560

IBM DOORS Next Generation DNG/RRC 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2017-1461

IBM DOORS Next Generation DNG/RRC 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2017-1593: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

PT-2017-14620

Name of the Vulnerable Software and Affected Versions IBM DOORS Next Generation DNG/RRC version 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

CVE-2017-1650: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133260...

CVE-2017-1607: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132927...

CVE-2017-1461: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2017-1688: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134063...

CVE-2017-1689: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134064...

PT-2017-14552

Name of the Vulnerable Software and Affected Versions IBM DOORS Next Generation DNG/RRC versions 4.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...