CVE-2018-1914

CVE-2018-1914 affects IBM Rational Engineering Lifecycle Manager (REL M) 5.0 through 6.0.6. The root cause is a cross-site scripting vulnerability in the Web UI that lets an attacker embed arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. Public records ...