CVSS: 5.4EPSS: 0%CPEs: 11EXPL: 0CVE-2017-1753
https://notcve.org/view.php?id=CVE-2017-1753
Multiple IBM Rational products are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 135655. Múltiples productos IBM Rational son vulnerables a inyección HTML. Un atacante remoto podría ejecutar código HTML malicioso que, cuando se visualice, se ejecutaría en el navegador web de la víctima en el contexto de seguridad del sitio anfitrión. • https://exchange.xforce.ibmcloud.com/vulnerabilities/135655 https://www.ibm.com/support/docview.wss?uid=ibm10713739 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0CVE-2018-1422
https://notcve.org/view.php?id=CVE-2018-1422
IBM Jazz Foundation products (IBM Rational DOORS Next Generation 5.0 through 5.0.2 and 6.0 through 6.0.5) are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 139025. Los productos IBM Jazz Foundation (IBM Rational DOORS Next Generation, de la versión 5.0 a la 5.0.2 y desde la versión 6.0 hasta la 6.0.5) son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. • http://www.ibm.com/support/docview.wss?uid=ibm10719817 http://www.securityfocus.com/bid/105003 https://exchange.xforce.ibmcloud.com/vulnerabilities/139025 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 3EXPL: 0CVE-2018-1529
https://notcve.org/view.php?id=CVE-2018-1529
IBM Rational DOORS Next Generation 5.0 through 5.0.2, 6.0 through 6.0.5 and IBM Rational Requirements Composer 5.0 through 5.0.2 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142291. IBM Rational DOORS Next Generation de la versión 5.0 a la 5.0.2, la versión 6.0 hasta la 6.0.5 y IBM Rational Requirements Composer desde la versión 5.0 hasta la 5.0.2 son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. • http://www.ibm.com/support/docview.wss?uid=ibm10717531 http://www.securityfocus.com/bid/104928 https://exchange.xforce.ibmcloud.com/vulnerabilities/142291 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 13EXPL: 0CVE-2018-1423
https://notcve.org/view.php?id=CVE-2018-1423
IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system. IBM X-Force ID: 139026. Los productos IBM Jazz Foundation podrían revelar información sensible a un atacante autenticado que podría conducir a más ataques contra el sistema. IBM X-Force ID: 139026. • http://www.ibm.com/support/docview.wss?uid=ibm10716599 https://exchange.xforce.ibmcloud.com/vulnerabilities/139026 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.8EPSS: 0%CPEs: 13EXPL: 0CVE-2018-1492
https://notcve.org/view.php?id=CVE-2018-1492
IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous session. IBM X-Force ID: 140977. Los productos IBM Jazz Foundation podrían permitir que un usuario con acceso físico al sistema inicie sesión como otro usuario debido al error del servidor a la hora de cerrar la sesión anterior correctamente. IBM X-Force ID: 140977. • http://www.ibm.com/support/docview.wss?uid=ibm10716599 https://exchange.xforce.ibmcloud.com/vulnerabilities/140977 • CWE-384: Session Fixation •