Security Bulletin: IBM Rational Software Architect Design Manager is vulnerable to cross-site scripting (XSS) attack (CVE-2017-1462)

Summary Document web editor in RSA DM could be vulnerable to cross-site scripting attack if document content was tampered. Vulnerability Details CVEID: CVE-2017-1462 DESCRIPTION: IBM Rhapsody DM is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript...

CVE-2017-1462

IBM Rhapsody DM is affected by a cross-site scripting (XSS) vulnerability in its Web UI. Affected products and versions are Rational Rhapsody Design Manager 5.0–5.0.2 and 6.0–6.0.4. The root cause is a vulnerability that allows embedding arbitrary JavaScript in the Web UI, potentially leading to ...