Security Bulletin: Cross-site scripting vulnerabilities affect multiple IBM Rational products based on IBM Jazz technology

Summary Cross-site scripting vulnerabilities affect multiple products: Collaborative Lifecycle Management CLM, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manager RELM, Rational Team Concert RTC, Rational Quality Manager RQM, Rational Rhapsody Design Manager Rhapsody DM an...

CVE-2017-1753

IBM’s advisory (CVE-2017-1753) documents cross-site scripting vulnerabilities across multiple IBM Rational products based on IBM Jazz technology, notably Rational CLM, RDNG, RELM, RTC, RQM, Rhapsody DM and RSA DM. The security issue arises from HTML injection in the Web UI, enabling an attacker t...