Page 2 of 18 results (0.004 seconds)

CVSS: 4.3EPSS: 0%CPEs: 24EXPL: 0

CVE-2012-5757

https://notcve.org/view.php?id=CVE-2012-5757

Cross-site scripting (XSS) vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Ejecución de secuiencias de comandos en sitios cruzados (XSS) en el cliente web de IBM Rational ClearQuest v7.1.x antes de v7.1.2.10 y v8.x antes de v8.0.0.6 permite a atacantes remotos inyectar secuencias de comandos web o HTML a través de una URL maliciosa. • http://www-01.ibm.com/support/docview.wss?uid=swg1PM77153 http://www.ibm.com/support/docview.wss?uid=swg21619993 https://exchange.xforce.ibmcloud.com/vulnerabilities/80061 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.0EPSS: 0%CPEs: 14EXPL: 0

CVE-2012-5765

https://notcve.org/view.php?id=CVE-2012-5765

The Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a SQL error message. El Cliente Web (también conocido como CQ Web) en IBM Rational ClearQuest v7.1.2.x antes de v7.1.2.9 y v8.0.0.5 antes de v8.0.0.x permite a atacantes remotos obtener información sensible a través de vectores no especificados que desencadenan un mensaje de error de SQL. • http://www-01.ibm.com/support/docview.wss?uid=swg1PM72905 http://www-01.ibm.com/support/docview.wss?uid=swg21620048 https://exchange.xforce.ibmcloud.com/vulnerabilities/80211 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 4.3EPSS: 0%CPEs: 14EXPL: 0

CVE-2012-4839

https://notcve.org/view.php?id=CVE-2012-4839

The OSLC interface in the Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to conduct phishing attacks via a FRAME element. La interfaz OSLC en el cliente Web (también conocido como CQ Web) en IBM Rational ClearQuest v7.1.2.x antes de v7.1.2.9 y v8.0.0.x antes de v8.0.0.5 permite a atacantes remotos para realizar ataques de phishing a través de un elemento FRAME. • http://www-01.ibm.com/support/docview.wss?uid=swg21620342 http://www.securitytracker.com/id?1027889 https://exchange.xforce.ibmcloud.com/vulnerabilities/79068 •

CVSS: 4.0EPSS: 0%CPEs: 18EXPL: 0

CVE-2012-2168

https://notcve.org/view.php?id=CVE-2012-2168

IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter. IBM Rational ClearQuest v7.1.x antes de v7.1.2.7 y v8.x antes de v8.0.0.3 permite a los usuarios remotos autenticados obtener información sensible de la traza de pila a partir de los mensajes de error del servidor CM a través de un parámetro no válido. • http://www-01.ibm.com/support/docview.wss?uid=swg1PM61822 http://www.ibm.com/support/docview.wss?uid=swg21606319 https://exchange.xforce.ibmcloud.com/vulnerabilities/75048 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.0EPSS: 72%CPEs: 19EXPL: 1

CVE-2012-0744 – IBM Rational ClearQuest 8.0 - Multiple Vulnerabilities

https://notcve.org/view.php?id=CVE-2012-0744

IBM Rational ClearQuest 7.1.x through 7.1.2.7 and 8.x through 8.0.0.3 allows remote attackers to obtain potentially sensitive information via a request to a (1) snoop, (2) hello, (3) ivt/, (4) hitcount, (5) HitCount.jsp, (6) HelloHTMLError.jsp, (7) HelloHTML.jsp, (8) HelloVXMLError.jsp, (9) HelloVXML.jsp, (10) HelloWMLError.jsp, (11) HelloWML.jsp, or (12) cqweb/j_security_check sample script. IBM Rational ClearQuest v7.1.x a v7.1.2.7 y v8.x a v8.0.0.3 permite a atacantes remotos obtener información potencialmente sensible a través de una solicitud a los scripts de ejemplo (1) snoop, (2) hello , (3) ivt/, (4) hitcount, (5) HitCount.jsp, (6) HelloHTMLError.jsp, (7) HelloHTML.jsp, (8) HelloVXMLError.jsp, (9) HelloVXML.jsp, (10) HelloWMLError.jsp, (11) HelloWML.jsp , o (12) cqweb/j_security_check. • https://www.exploit-db.com/exploits/37643 http://www-01.ibm.com/support/docview.wss?uid=swg1PM66896 http://www.ibm.com/support/docview.wss?uid=swg21599361 http://www.ibm.com/support/docview.wss?uid=swg21606317 https://exchange.xforce.ibmcloud.com/vulnerabilities/74671 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •