Security Bulletin: Cross-site scripting vulnerability affects multiple IBM Rational products based on IBM Jazz technology (CVE-2016-8968)

Summary Cross-site scripting vulnerability in the IBM Jazz Foundation affects the following IBM Jazz based Applications: Collaborative Lifecycle Management CLM, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manager RELM, Rational Team Concert RTC, Rational Quality Manager RQ...

CVE-2016-0285

CVE-2016-0285 is an XSS vulnerability in IBM Jazz-based CLM stack (RCLM, RQM, RTC, RDNG, RELM, Rhapsody DM, RSA DM). The issue affects multiple versions across 3.0.1.6 up to 6.0.x, where remote authenticated users could inject arbitrary web script or HTML via a crafted field, resulting in script ...