Design/Logic Flaw

IBM Rational Team Concert RTC is vulnerable to HTML injection. A remote attacker with project administrator privileges could send a project that contains malicious HTML code, which when the project is viewed, would be executed in the victim's Web browser within the security context of the hosting...

CVE-2016-6035

IBM Rational Quality Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 116896...

CVE-2016-6037

IBM Rational Team Concert RTC is vulnerable to HTML injection. A remote attacker with project administrator privileges could send a project that contains malicious HTML code, which when the project is viewed, would be executed in the victim's Web browser within the security context of the hosting...

CVE-2016-6035

IBM Rational Quality Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 116896...

Cross site scripting

IBM Rational Quality Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 116896...

CVE-2016-6035

IBM Rational Quality Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 116896...

CVE-2016-6035

The connected IBM advisory confirms CVE-2016-6035 affects IBM Rational Quality Manager (RQM) and describes a cross-site scripting vulnerability in the Web UI that can lead to credential disclosure within a trusted session. Affected versions include Rational Quality Manager 4.0–4.0.7; 5.0–5.0.2; a...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2017-04814)

IBM Rational Quality Manager is a collaborative, Web-based quality management solution. A cross-site scripting vulnerability exists in IBM Rational Quality Manager, which allows an attacker to embed arbitrary JavaScript code into the Web UI, which could change the intended use and result in the...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2017-04813)

IBM Rational Quality Manager is a collaborative, Web-based quality management solution. A cross-site scripting vulnerability exists in IBM Rational Quality Manager, which allows an attacker to embed arbitrary JavaScript code into the Web UI, which could change the intended use and result in the...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2017-04812)

IBM Rational Quality Manager is a collaborative, Web-based quality management solution. A cross-site scripting vulnerability exists in IBM Rational Quality Manager, which allows an attacker to embed arbitrary JavaScript code into the Web UI, which could change the intended use and result in the...

Cross site scripting

IBM Rational Quality Manager RQM 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Referenc...

Cross site scripting

IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference :...

CVE-2016-6031

IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference :...

CVE-2016-6036

IBM Rational Quality Manager RQM 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Referenc...

CVE-2016-6031

IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference :...

CVE-2016-6036

IBM Rational Quality Manager RQM 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Referenc...

CVE-2016-6036

IBM Rational Quality Manager RQM 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Referenc...

CVE-2016-6031

CVE-2016-6031 affects IBM Rational Quality Manager 4.0–6.0.3 (RQM). It is a cross-site scripting vulnerability in the Web UI that could allow embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The IBM advisory lists multiple CLM/RQM products af...

CVE-2016-6036

Summary: CVE-2016-6036 affects IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0. The issue is a cross-site scripting (XSS) vulnerability in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Clarified ...

CVE-2016-6031

IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference :...