CVE-2016-3014: XSS
First published: Wed Nov 30 2016(Updated: )
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Quality Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Team Concert 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational DOORS Next Generation 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Engineering Lifecycle Manager | =4.0.0 | |
| IBM Engineering Lifecycle Manager | =4.0.1 | |
| IBM Engineering Lifecycle Manager | =4.0.2 | |
| IBM Engineering Lifecycle Manager | =4.0.3 | |
| IBM Engineering Lifecycle Manager | =4.0.4 | |
| IBM Engineering Lifecycle Manager | =4.0.5 | |
| IBM Engineering Lifecycle Manager | =4.0.6 | |
| IBM Engineering Lifecycle Manager | =4.0.7 | |
| IBM Engineering Lifecycle Manager | =5.0.0 | |
| IBM Engineering Lifecycle Manager | =5.0.1 | |
| IBM Engineering Lifecycle Manager | =5.0.2 | |
| IBM Rhapsody Design Manager | =4.0 | |
| IBM Rhapsody Design Manager | =4.0.1 | |
| IBM Rhapsody Design Manager | =4.0.2 | |
| IBM Rhapsody Design Manager | =4.0.3 | |
| IBM Rhapsody Design Manager | =4.0.4 | |
| IBM Rhapsody Design Manager | =4.0.5 | |
| IBM Rhapsody Design Manager | =4.0.6 | |
| IBM Rhapsody Design Manager | =4.0.7 | |
| IBM Rhapsody Design Manager | =5.0.0 | |
| IBM Rhapsody Design Manager | =5.0.1 | |
| IBM Rhapsody Design Manager | =5.0.2 | |
| IBM Rational Quality Manager | =4.0.0 | |
| IBM Rational Quality Manager | =4.0.1 | |
| IBM Rational Quality Manager | =4.0.2 | |
| IBM Rational Quality Manager | =4.0.3 | |
| IBM Rational Quality Manager | =4.0.4 | |
| IBM Rational Quality Manager | =4.0.5 | |
| IBM Rational Quality Manager | =4.0.6 | |
| IBM Rational Quality Manager | =4.0.7 | |
| IBM Rational Quality Manager | =5.0.0 | |
| IBM Rational Quality Manager | =5.0.1 | |
| IBM Rational Quality Manager | =5.0.2 | |
| IBM Rational Software Architect Design Manager | =4.0.0 | |
| IBM Rational Software Architect Design Manager | =4.0.1 | |
| IBM Rational Software Architect Design Manager | =4.0.2 | |
| IBM Rational Software Architect Design Manager | =4.0.3 | |
| IBM Rational Software Architect Design Manager | =4.0.4 | |
| IBM Rational Software Architect Design Manager | =4.0.5 | |
| IBM Rational Software Architect Design Manager | =4.0.6 | |
| IBM Rational Software Architect Design Manager | =4.0.7 | |
| IBM Rational Software Architect Design Manager | =5.0.0 | |
| IBM Rational Software Architect Design Manager | =5.0.1 | |
| IBM Rational Software Architect Design Manager | =5.0.2 | |
| IBM Rational DOORS Next Generation | =4.0.0 | |
| IBM Rational DOORS Next Generation | =4.0.1 | |
| IBM Rational DOORS Next Generation | =4.0.2 | |
| IBM Rational DOORS Next Generation | =4.0.3 | |
| IBM Rational DOORS Next Generation | =4.0.4 | |
| IBM Rational DOORS Next Generation | =4.0.5 | |
| IBM Rational DOORS Next Generation | =4.0.6 | |
| IBM Rational DOORS Next Generation | =4.0.7 | |
| IBM Rational DOORS Next Generation | =5.0.0 | |
| IBM Rational DOORS Next Generation | =5.0.1 | |
| IBM Rational DOORS Next Generation | =5.0.2 | |
| IBM Rational Team Concert | =4.0.0 | |
| IBM Rational Team Concert | =4.0.1 | |
| IBM Rational Team Concert | =4.0.2 | |
| IBM Rational Team Concert | =4.0.3 | |
| IBM Rational Team Concert | =4.0.4 | |
| IBM Rational Team Concert | =4.0.5 | |
| IBM Rational Team Concert | =4.0.6 | |
| IBM Rational Team Concert | =4.0.7 | |
| IBM Rational Team Concert | =5.0.0 | |
| IBM Rational Team Concert | =5.0.1 | |
| IBM Rational Team Concert | =5.0.2 | |
| IBM Collaborative Lifecycle Management | =4.0.0 | |
| IBM Collaborative Lifecycle Management | =4.0.1 | |
| IBM Collaborative Lifecycle Management | =4.0.2 | |
| IBM Collaborative Lifecycle Management | =4.0.3 | |
| IBM Collaborative Lifecycle Management | =4.0.4 | |
| IBM Collaborative Lifecycle Management | =4.0.5 | |
| IBM Collaborative Lifecycle Management | =4.0.6 | |
| IBM Collaborative Lifecycle Management | =4.0.7 | |
| IBM Collaborative Lifecycle Management | =5.0.0 | |
| IBM Collaborative Lifecycle Management | =5.0.1 | |
| IBM Collaborative Lifecycle Management | =5.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm engineering lifecycle manager
- version/ibm engineering lifecycle manager/4.0.0
- version/ibm engineering lifecycle manager/4.0.1
- version/ibm engineering lifecycle manager/4.0.2
- version/ibm engineering lifecycle manager/4.0.3
- version/ibm engineering lifecycle manager/4.0.4
- version/ibm engineering lifecycle manager/4.0.5
- version/ibm engineering lifecycle manager/4.0.6
- version/ibm engineering lifecycle manager/4.0.7
- version/ibm engineering lifecycle manager/5.0.0
- version/ibm engineering lifecycle manager/5.0.1
- version/ibm engineering lifecycle manager/5.0.2
- canonical/ibm rhapsody design manager
- version/ibm rhapsody design manager/4.0
- version/ibm rhapsody design manager/4.0.1
- version/ibm rhapsody design manager/4.0.2
- version/ibm rhapsody design manager/4.0.3
- version/ibm rhapsody design manager/4.0.4
- version/ibm rhapsody design manager/4.0.5
- version/ibm rhapsody design manager/4.0.6
- version/ibm rhapsody design manager/4.0.7
- version/ibm rhapsody design manager/5.0.0
- version/ibm rhapsody design manager/5.0.1
- version/ibm rhapsody design manager/5.0.2
- canonical/ibm rational quality manager
- version/ibm rational quality manager/4.0.0
- version/ibm rational quality manager/4.0.1
- version/ibm rational quality manager/4.0.2
- version/ibm rational quality manager/4.0.3
- version/ibm rational quality manager/4.0.4
- version/ibm rational quality manager/4.0.5
- version/ibm rational quality manager/4.0.6
- version/ibm rational quality manager/4.0.7
- version/ibm rational quality manager/5.0.0
- version/ibm rational quality manager/5.0.1
- version/ibm rational quality manager/5.0.2
- canonical/ibm rational software architect design manager
- version/ibm rational software architect design manager/4.0.0
- version/ibm rational software architect design manager/4.0.1
- version/ibm rational software architect design manager/4.0.2
- version/ibm rational software architect design manager/4.0.3
- version/ibm rational software architect design manager/4.0.4
- version/ibm rational software architect design manager/4.0.5
- version/ibm rational software architect design manager/4.0.6
- version/ibm rational software architect design manager/4.0.7
- version/ibm rational software architect design manager/5.0.0
- version/ibm rational software architect design manager/5.0.1
- version/ibm rational software architect design manager/5.0.2
- canonical/ibm rational doors next generation
- version/ibm rational doors next generation/4.0.0
- version/ibm rational doors next generation/4.0.1
- version/ibm rational doors next generation/4.0.2
- version/ibm rational doors next generation/4.0.3
- version/ibm rational doors next generation/4.0.4
- version/ibm rational doors next generation/4.0.5
- version/ibm rational doors next generation/4.0.6
- version/ibm rational doors next generation/4.0.7
- version/ibm rational doors next generation/5.0.0
- version/ibm rational doors next generation/5.0.1
- version/ibm rational doors next generation/5.0.2
- canonical/ibm rational team concert
- version/ibm rational team concert/4.0.0
- version/ibm rational team concert/4.0.1
- version/ibm rational team concert/4.0.2
- version/ibm rational team concert/4.0.3
- version/ibm rational team concert/4.0.4
- version/ibm rational team concert/4.0.5
- version/ibm rational team concert/4.0.6
- version/ibm rational team concert/4.0.7
- version/ibm rational team concert/5.0.0
- version/ibm rational team concert/5.0.1
- version/ibm rational team concert/5.0.2
- canonical/ibm collaborative lifecycle management
- version/ibm collaborative lifecycle management/4.0.0
- version/ibm collaborative lifecycle management/4.0.1
- version/ibm collaborative lifecycle management/4.0.2
- version/ibm collaborative lifecycle management/4.0.3
- version/ibm collaborative lifecycle management/4.0.4
- version/ibm collaborative lifecycle management/4.0.5
- version/ibm collaborative lifecycle management/4.0.6
- version/ibm collaborative lifecycle management/4.0.7
- version/ibm collaborative lifecycle management/5.0.0
- version/ibm collaborative lifecycle management/5.0.1
- version/ibm collaborative lifecycle management/5.0.2