Security Bulletin: Cross-site scripting vulnerabilities affect IBM® Rational® Team Concert

Summary IBM Team Concert RTC is vulnerable to multiple cross-site scripting vulnerabilities. Vulnerability Details CVEID: CVE-2016-9701 DESCRIPTION: IBM Team Concert is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alteri...

CVE-2016-9733

IBM Team Concert RTC 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119762...

CVE-2016-9733

IBM Team Concert (RTC) is affected by multiple cross-site scripting vulnerabilities, including CVE-2016-9733, in the Web UI across RTC 4.0–6.0.x. The root cause is XSS in the Web UI that can allow injected JavaScript to run in a trusted session, potentially leading to credential disclosure. Remed...