CVE-2011-4820

CVE-2011-4820 affects IBM Rational Asset Manager 7.5. A remote attacker could bypass security restrictions by using the UID parameter to modify another user’s preferences, per the description in the NVD entry. The NVD data lists a base score of 4.3 (Medium) with network access, low attack complex...

CVE-2011-4708

CVE-2011-4708 affects IBM Rational Asset Manager prior to 7.5.1. It is a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Concrete affected product/version is stated; exploit details and root-cause mechanism...