CVE-2005-2994: XSS
Unspecified vulnerability in the web client for IBM Rational ClearQuest 2002.05.00 and 2002.05.20, and 2003.06.00 through 2003.06.15 before SR5, allows remote attackers to execute XML Style Sheets (XSS).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2994?
CVE-2005-2994 is considered a high severity vulnerability due to potential remote code execution via XML Style Sheets.
How do I fix CVE-2005-2994?
To fix CVE-2005-2994, upgrade IBM Rational ClearQuest to a version that has addressed this vulnerability, such as SR5 or later.
What versions of IBM Rational ClearQuest are affected by CVE-2005-2994?
CVE-2005-2994 affects IBM Rational ClearQuest versions 5.00, 5.20, 6.00, 6.10, 6.12, 6.13, 6.14, and 6.15.
Can CVE-2005-2994 be exploited remotely?
Yes, CVE-2005-2994 can be exploited remotely by attackers through the web client of the affected IBM Rational ClearQuest versions.
Is there a patch available for CVE-2005-2994?
Yes, a patch is included in later service releases of IBM Rational ClearQuest after SR5.