IBM Rational DOORS Next Generation Multiple Cross Site Scripting Vulnerabilities
BID:101895
Info
IBM Rational DOORS Next Generation Multiple Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 101895 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-1593 CVE-2017-1546 CVE-2017-1560 CVE-2017-1678 CVE-2017-1461 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 16 2017 12:00AM |
| Updated: | Dec 19 2017 10:37PM |
| Credit: | IBM |
| Vulnerable: |
IBM Rational Requirements Composer 5.0.2 IBM Rational Requirements Composer 5.0.1 IBM Rational Requirements Composer 4.0.7 IBM Rational Requirements Composer 4.0.5 IBM Rational Requirements Composer 4.0.4 IBM Rational Requirements Composer 4.0.3 IBM Rational Requirements Composer 4.0.1 IBM Rational Requirements Composer 5.0 IBM Rational Requirements Composer 4.0.6 IBM Rational Requirements Composer 4.0 IBM Rational DOORS Next Generation 6.0.4 IBM Rational DOORS Next Generation 6.0.3 IBM Rational DOORS Next Generation 6.0.2 IBM Rational DOORS Next Generation 6.0.1 IBM Rational DOORS Next Generation 6.0 |
| Not Vulnerable: |
IBM Rational Requirements Composer 5.0.2 iFix024 IBM Rational Requirements Composer 4.0.7 iFix015 IBM Rational DOORS Next Generation 6.0.2 iFix014 |
Exploit / POC
IBM Rational DOORS Next Generation Multiple Cross Site Scripting Vulnerabilities
An attacker can exploit these issues by enticing an unsuspecting user to follow a malicious URI.
An attacker can exploit these issues by enticing an unsuspecting user to follow a malicious URI.
References
IBM Rational DOORS Next Generation Multiple Cross Site Scripting Vulnerabilities
References:
References: