CVSS: 5.4EPSS: 0%CPEs: 54EXPL: 0CVE-2013-5404
https://notcve.org/view.php?id=CVE-2013-5404
10 Dec 2013 — Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IFRAME element. Vulenrabilidad Cross-site scripting (XSS) en la aplicación de búsqueda en IBM Rational Quality Manager (RQM) 2.0 a 2.0.1.1, 3.0.1.6 3.... • http://www-01.ibm.com/support/docview.wss?uid=swg21653689 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 1%CPEs: 2EXPL: 2CVE-2010-4094 – Apache Tomcat Manager - Application Deployer (Authenticated) Code Execution
https://notcve.org/view.php?id=CVE-2010-4094
26 Oct 2010 — The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by leveraging access to the manager role. NOTE: this might overlap CVE-2009-3548. El servidor Tomcat en IBM Rational Quality Manager y Rational Test Lab Manager tiene clave por defecto para una cuenta ADMIN, lo que hace fácilmente para atacantes remotos ejecutar código de su elección abrevechando el acceso al rol de... • https://packetstorm.news/files/id/125021 • CWE-255: Credentials Management Errors •