XSS in IBM Rational Team Concert
CVE-2015-0122
Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0123.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.014 (69.7th percentile) — read the EPSS interpretation.
Affected products
- Ibm Rational_team_concert — versions 2.0.0.2, 3.0, 3.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_SECTRACK)
- psirt@us.ibm.com (vdb-entry, x_refsource_BID)