CVE-2012-5757: XSS
Published Mar 21, 2013
·Updated
Cross-site scripting (XSS) vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Affected Software
24 affected components
IBM Rational ClearQuest=7.1.1.1
IBM Rational ClearQuest=7.1.1.2
IBM Rational ClearQuest=7.1.1.3
IBM Rational ClearQuest=7.1.1.4
IBM Rational ClearQuest=7.1.1.5
IBM Rational ClearQuest=7.1.1.6
IBM Rational ClearQuest=7.1.1.7
IBM Rational ClearQuest=7.1.1.8
IBM Rational ClearQuest=7.1.2
IBM Rational ClearQuest=7.1.2.1
IBM Rational ClearQuest=7.1.2.2
IBM Rational ClearQuest=7.1.2.3
IBM Rational ClearQuest=7.1.2.4
IBM Rational ClearQuest=7.1.2.5
IBM Rational ClearQuest=7.1.2.6
IBM Rational ClearQuest=7.1.2.7
IBM Rational ClearQuest=7.1.2.8
IBM Rational ClearQuest=7.1.2.9
IBM Rational ClearQuest=8.0
IBM Rational ClearQuest=8.0.0.1
IBM Rational ClearQuest=8.0.0.2
IBM Rational ClearQuest=8.0.0.3
IBM Rational ClearQuest=8.0.0.4
IBM Rational ClearQuest=8.0.0.5
Event History
Mar 21, 2013
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-5757?
CVE-2012-5757 has a moderate severity rating due to its cross-site scripting vulnerability.
2
How do I fix CVE-2012-5757?
To remediate CVE-2012-5757, upgrade your IBM Rational ClearQuest to versions 7.1.2.10 or 8.0.0.6 or later.
3
What versions of IBM Rational ClearQuest are affected by CVE-2012-5757?
CVE-2012-5757 affects IBM Rational ClearQuest versions 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6.
4
What type of vulnerability is CVE-2012-5757?
CVE-2012-5757 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2012-5757 be exploited remotely?
Yes, CVE-2012-5757 can be exploited remotely by injecting arbitrary web scripts or HTML via crafted URLs.