Page 5 of 37 results (0.003 seconds)

CVSS: 5.0EPSS: 0%CPEs: 24EXPL: 0

CVE-2009-4357

https://notcve.org/view.php?id=CVE-2009-4357

CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors. La interfaz web (también conocida como CQWeb) de IBM Rational ClearQuest antes de v7.1.1 no gestiona adecuadamente el uso de URLs antiguas de conexión automática, lo que podría permitir descubrir las contraseñas de cuentas de usuario los atacantes remotos mediante vectores no especificados. • http://secunia.com/advisories/37811 http://securitytracker.com/id?1023370 http://www-01.ibm.com/support/docview.wss?uid=swg1PK86377 http://www.securityfocus.com/bid/37385 http://www.vupen.com/english/advisories/2009/3580 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 4.3EPSS: 0%CPEs: 14EXPL: 0

CVE-2009-2211

https://notcve.org/view.php?id=CVE-2009-2211

Cross-site scripting (XSS) vulnerability in the CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el servidor CQWeb en IBM Rational ClearQuest 7.0.0 en versiones anteriores a la 7.0.0.6 y 7.0.1 en versiones anteriores a la 7.0.1.5 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados. • http://secunia.com/advisories/35564 http://www-01.ibm.com/support/docview.wss?uid=swg1PK77030 http://www.securitytracker.com/id?1022456 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.0EPSS: 0%CPEs: 11EXPL: 0

CVE-2009-2212

https://notcve.org/view.php?id=CVE-2009-2212

The CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows attackers to discover a (1) username or (2) password via unspecified vectors. El servidor CQWeb en IBM Rational ClearQuest 7.0.0 en versiones anteriores a la 7.0.0.6 y 7.0.1 en versiones anteriores a la 7.0.1.5 permite a atacantes descubrir el (1) nombre de usuario o (2) la contraseña mediante vectores no especificados. • http://secunia.com/advisories/35564 http://www-01.ibm.com/support/docview.wss?uid=swg1PK77030 http://www.securitytracker.com/id?1022456 •

CVSS: 4.3EPSS: 0%CPEs: 7EXPL: 1

CVE-2008-5330 – IBM Rational ClearCase 7/8 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2008-5330

Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before 7.0.0.4, and 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1.3, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO of a URI associated with a VOB page. Múltiples vulnerabilidades de secuencias de ejecución de comandos en sitios cruzados en la interfaz web de ClearCase RWP server en IBM Rational ClearCase v7.0.0 anterior a la v7.0.0.4, y v7.0.1.1-RATL-RCC-IFIX02 y posiblemente v7.0.1 anteriores a v7.0.1.3, permitiria a atacantes remotos inyectar secuencias de comandos web o HTML a traves de PATH_INFO de un URI asociado con una pagina VOB. • https://www.exploit-db.com/exploits/32631 http://secunia.com/advisories/32957 http://securitytracker.com/id?1021295 http://www-01.ibm.com/support/docview.wss?uid=swg1PK70972 http://www.securityfocus.com/bid/32574 http://www.vupen.com/english/advisories/2008/3330 https://exchange.xforce.ibmcloud.com/vulnerabilities/46983 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0

CVE-2008-5329

https://notcve.org/view.php?id=CVE-2008-5329

ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbitrary database by specifying multiple comma-separated server identifiers on the JTLRMIREGISTRYSERVERS line in a jtl.properties file. ClearQuest Web en IBM Rational ClearQuest MultiSite anteriores a la v7.1 permitiría a atacantes remotos dirigir envíos del cliente y cambios a una base de datos de su elección especificando unos identificadores de servidor separados por múltiples comas en la linea JTLRMIREGISTRYSERVERS del fichero jtl.properties. • http://secunia.com/advisories/32847 http://www-01.ibm.com/support/docview.wss?uid=swg1PK38745 https://exchange.xforce.ibmcloud.com/vulnerabilities/46993 •