CVE-2008-5325: XSS
Published Dec 5, 2008
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
2 affected components
IBM Rational ClearQuest>=7.0.0.0<7.0.0.4
IBM Rational ClearQuest>=7.0.1<7.0.1.3
Event History
Dec 5, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-5325?
CVE-2008-5325 is classified as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
2
What versions of IBM Rational ClearQuest are affected by CVE-2008-5325?
CVE-2008-5325 affects IBM Rational ClearQuest versions 7.0.0 to 7.0.0.4 and 7.0.1 to 7.0.1.3.
3
How do I fix CVE-2008-5325?
To fix CVE-2008-5325, upgrade to IBM Rational ClearQuest version 7.0.0.4 or 7.0.1.3 or later.
4
What types of attacks are possible with CVE-2008-5325?
CVE-2008-5325 could allow attackers to inject arbitrary web scripts or HTML into affected applications.
5
What are the implications of exploiting CVE-2008-5325?
Exploiting CVE-2008-5325 can lead to unauthorized actions on behalf of users, data theft, or session hijacking.