{"api_version":"1","generated_at":"2026-07-23T06:15:21+00:00","cve":"CVE-2011-2606","urls":{"html":"https://cve.report/CVE-2011-2606","api":"https://cve.report/api/cve/CVE-2011-2606.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-2606","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-2606"},"summary":{"title":"CVE-2011-2606","description":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511.","state":"PUBLISHED","assigner":"mitre","published_at":"2011-06-30 16:55:05","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://secunia.com/advisories/44926","name":"http://secunia.com/advisories/44926","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM Rational Team Concert Cross-Site Scripting Vulnerabilities - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/73198","name":"http://www.osvdb.org/73198","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68119","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68119","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/48356","name":"http://www.securityfocus.com/bid/48356","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM Rational Team Concert Multiple Unspecified Cross Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.ibm.com/support/docview.wss?uid=swg1PM40308","name":"http://www.ibm.com/support/docview.wss?uid=swg1PM40308","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"PM40308: [wi 165511] XSS vulnerability found in parameter.","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2606","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2606","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"2606","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"rational_team_concert","cpe6":"3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T23:08:23.477Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"PM40308","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"],"url":"http://www.ibm.com/support/docview.wss?uid=swg1PM40308"},{"name":"48356","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/48356"},{"name":"rational-team-unspec-xss(68119)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68119"},{"name":"44926","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/44926"},{"name":"73198","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/73198"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-06-20T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"PM40308","tags":["vendor-advisory","x_refsource_AIXAPAR"],"url":"http://www.ibm.com/support/docview.wss?uid=swg1PM40308"},{"name":"48356","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/48356"},{"name":"rational-team-unspec-xss(68119)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68119"},{"name":"44926","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/44926"},{"name":"73198","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/73198"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2011-2606","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"PM40308","refsource":"AIXAPAR","url":"http://www.ibm.com/support/docview.wss?uid=swg1PM40308"},{"name":"48356","refsource":"BID","url":"http://www.securityfocus.com/bid/48356"},{"name":"rational-team-unspec-xss(68119)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/68119"},{"name":"44926","refsource":"SECUNIA","url":"http://secunia.com/advisories/44926"},{"name":"73198","refsource":"OSVDB","url":"http://www.osvdb.org/73198"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2011-2606","datePublished":"2011-06-30T16:00:00.000Z","dateReserved":"2011-06-30T00:00:00.000Z","dateUpdated":"2024-08-06T23:08:23.477Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-06-30 16:55:05","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:rational_team_concert:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F07F4E00-F0BA-4821-B5B4-3C0E9D01AAE3"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"2606","Ordinal":"1","Title":"CVE-2011-2606","CVE":"CVE-2011-2606","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"2606","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511.","Type":"Description","Title":"CVE-2011-2606"},{"CveYear":"2011","CveId":"2606","Ordinal":"2","NoteData":"2011-06-30","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"2606","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}