XSS in IBM Rational Software Architect
CVE-2015-7439
Cross-site scripting (XSS) vulnerability in InfoSphere Data Architect (IDA), as distributed in IBM Rational Software Architect 8.5 through 9.5, Rational Software Architect for WebSphere Software (RSA4WS) 8.5 through 9.5, and Rational Software Architect RealTime (RSART) 8.5 through 9.5, allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.008 (52.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
Affected products
- Ibm Rational_software_architect — versions 8.5.0, 8.5.1, 8.5.1.0
- Ibm Rational_software_architect_for_websphere_software — versions 8.5.0, 8.5.1, 8.5.1.0
- Ibm Rational_software_architect_for_websphere_software\' — versions 8.5.5.1
- Ibm Rational_software_architect_realtime — versions 8.5.0, 8.5.1, 8.5.1.0
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2015-7439?
- CVE-2015-7439 is a medium-severity vulnerability in IBM Rational Software Architect, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2016-01-27.
- How severe is CVE-2015-7439?
- Medium severity. CVSS v3 base score is 6.1 out of 10.