CVE-2020-4252

IBM DOORS Next Generation (DNG/RRC) is affected by a cross-site scripting vulnerability (CVE-2020-4252) in the Web UI for multiple 6.x releases (notably 6.0.2, 6.0.6, 6.0.6.1). The underlying issue allows an attacker to inject arbitrary JavaScript into the Web UI, potentially leading to credentia...

Security Bulletin: Multiple cross-site scripting vulnerabilities affect IBM DOORS Next Generation

Summary There are multiple cross-site scripting defects that affect IBM DOORS Next Generation DNG/RRC Vulnerability Details CVEID: CVE-2019-4740 DESCRIPTION: IBM DOORS Next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code...