CVE-2015-0129: XSS
Published Mar 13, 2015
·Updated
Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager (RQM) 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Affected Software
11 affected components
IBM Rational Quality Manager=4.0
IBM Rational Quality Manager=4.0.0.1
IBM Rational Quality Manager=4.0.0.2
IBM Rational Quality Manager=4.0.1
IBM Rational Quality Manager=4.0.2
IBM Rational Quality Manager=4.0.3
IBM Rational Quality Manager=4.0.4
IBM Rational Quality Manager=4.0.5
IBM Rational Quality Manager=4.0.7
IBM Rational Quality Manager=5.0.0
IBM Rational Quality Manager=5.0.1
Remediation
Patch Available
Event History
Mar 13, 2015
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-0129?
CVE-2015-0129 is classified as a moderate severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2015-0129?
To fix CVE-2015-0129, upgrade IBM Rational Quality Manager to version 4.0.7 iFix3 or 5.0.2 or later.
3
Who is affected by CVE-2015-0129?
CVE-2015-0129 affects users of IBM Rational Quality Manager versions 4.0.x before 4.0.7 iFix3 and 5.x before 5.0.2.
4
What impact does CVE-2015-0129 have?
CVE-2015-0129 allows remote authenticated users to inject arbitrary web script or HTML into the application.
5
Is CVE-2015-0129 a client-side or server-side vulnerability?
CVE-2015-0129 is a client-side vulnerability that exploits how the application handles user input.