CVE-2017-1607

CVE-2017-1607 affects IBM DOORS Next Generation (DNG/RRC) 6.0. The flaw is a cross-site scripting vulnerability in the Web UI caused by insufficient input validation, enabling arbitrary JavaScript execution and potentially credentials disclosure in a trusted session. IBM’s connected bulletin show...

CVE-2017-1650

This CVE applies to IBM DOORS Next Generation (DNG/RRC) 6.0 and its 6.0.x releases, where a cross-site scripting flaw in the Web UI could let an attacker inject arbitrary JavaScript and potentially disclose credentials in a trusted session. The root cause is improper input validation in the Web U...

CVE-2017-1678

CVE-2017-1678 affects IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0; the vulnerability is a cross-site scripting flaw in the Web UI that can lead to credentials disclosure within a trusted session. Remediation is available by upgrading to fixed builds: 6.0.2 iFix014 or later, 6.0.3 iFix00...

CVE-2017-1688

IBM DOORS Next Generation (DNG/RRC) 6.0 is affected by a cross-site scripting vulnerability in the Web UI that can allow an attacker to inject arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. The issue targets the Web UI component of DNG/RRC 6.0 (and 6....

CVE-2017-1689

The CVE-2017-1689 issue affects IBM Rational DOORS Next Generation (DNG/RRC) 6.0 (and includes 6.0.0–6.0.4 as stated in the IBM bulletin). It is a Cross-Site Scripting vulnerability in the Web UI that allows an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure ...

CVE-2017-1593

IBM DOORS Next Generation (DNG/RRC) versions affected: 4.0, 5.0, and 6.0 (including DOORS Next Generation 6.0–6.0.4; Rational Requirements Composer 4.0–5.0) are exposed to a cross-site scripting (XSS) vulnerability in the Web UI that can allow arbitrary JavaScript to be executed in a trusted sess...

CVE-2017-1688

IBM DOORS Next Generation DNG/RRC 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134063...

CVE-2017-1560

IBM DOORS Next Generation (DNG/RRC) versions 4.0, 5.0 and 6.0 are affected by a cross-site scripting (XSS) vulnerability in the Web UI that can allow an attacker to inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The issue is documented across ...

PT-2017-14552

Name of the Vulnerable Software and Affected Versions IBM DOORS Next Generation DNG/RRC versions 4.0 through 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

PT-2017-14620

Name of the Vulnerable Software and Affected Versions IBM DOORS Next Generation DNG/RRC version 6.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

CVE-2017-1689: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134064...

CVE-2017-1650: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133260...

CVE-2017-1688: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134063...

CVE-2017-1593: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2017-1560: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2017-1607: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132927...

CVE-2017-1461: Improper Neutralization of Input During Web Page Generation

IBM DOORS Next Generation DNG/RRC 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

Adobe DNG Converter Memory Corruption Vulnerability (APSB17-37) - Windows

Adobe DNG Converter is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Patches Flash Player, 56 Bugs in Reader and Acrobat

Adobe kicked off today’s Patch Tuesday barrage with a monster update for Acrobat and Reader patching dozens of remote code execution vulnerabilities, along with the near-customary Flash Player update addressing a handful of critical flaws. None of the vulnerabilities patched today are under activ...

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Flash Player, Photoshop CC, Adobe Connect, DNG Converter, InDesign, Digital Editions, Shockwave Player, and Experience Manager. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affecte...