Zero-friction vulnerability management platform

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

CVE-2015-0130

CVE information

Published

7 years ago

Last Modified

7 years ago

CVSSv2.0 Severity

Low

Impact Analysis

Description

Cross-site scripting (XSS) vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Quality Manager (RQM) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Team Concert (RTC) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Requirements Composer (RRC) 4.x through 4.0.7; and Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL..

CVSSv2.0 Score

Severity
Low
Base Score
3.5/10
Exploit Score
6.8/10
Access Vector
Network
Access Complexity
Medium
Authentication Required
Single
Impact Score
2.9/10
Confidentiality Impact
None
Availability Impact
None
Integrity Impact
Partial

Products Affected

CPE Affected Vulnerable Excluding Edit
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.0:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_doors_next_generation:5.0.0:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_team_concert:4.0.0.2:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_team_concert:5.0.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_team_concert:4.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_team_concert:4.0.0.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.
  Yes
- -
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.
  Yes
- -
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.
  Yes
- -
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.
  Yes
- -
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.
  Yes
- -
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.
  Yes
- -
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.
  Yes
- -
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.
  Yes
- -
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.
  Yes
- -
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.
  Yes
- -
cpe:2.3:a:ibm:rational_requirements_composer:4.0.6:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.2:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_requirements_composer:4.0.5:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_requirements_composer:4.0.0:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.1:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*
  Yes
- -