CVE-2016-9733: XSS

Published Jul 5, 2017

Updated

IBM Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119762.

Affected Software

37 affected components

IBM Rational Team Concert=4.0

IBM Rational Team Concert=4.0.0

IBM Rational Team Concert=4.0.0.1

IBM Rational Team Concert=4.0.0.2

IBM Rational Team Concert=4.0.1

IBM Rational Team Concert=4.0.2

IBM Rational Team Concert=4.0.3

IBM Rational Team Concert=4.0.4

IBM Rational Team Concert=4.0.5

IBM Rational Team Concert=4.0.6

IBM Rational Team Concert=4.0.7

IBM Rational Team Concert=5.0

IBM Rational Team Concert=5.0.0

IBM Rational Team Concert=5.0.1

IBM Rational Team Concert=5.0.2

IBM Rational Team Concert=6.0

IBM Rational Team Concert=6.0.0

IBM Rational Team Concert=6.0.1

IBM Rational Team Concert=6.0.2

IBM Rational Team Concert=6.0.3

IBM Rational Collaborative Lifecycle Management=4.0

IBM Rational Collaborative Lifecycle Management=4.0.0

IBM Rational Collaborative Lifecycle Management=4.0.1

IBM Rational Collaborative Lifecycle Management=4.0.2

IBM Rational Collaborative Lifecycle Management=4.0.3

IBM Rational Collaborative Lifecycle Management=4.0.4

IBM Rational Collaborative Lifecycle Management=4.0.5

IBM Rational Collaborative Lifecycle Management=4.0.6

IBM Rational Collaborative Lifecycle Management=4.0.7

IBM Rational Collaborative Lifecycle Management=5.0

IBM Rational Collaborative Lifecycle Management=5.0.0

IBM Rational Collaborative Lifecycle Management=5.0.1

IBM Rational Collaborative Lifecycle Management=5.0.2

IBM Rational Collaborative Lifecycle Management=6.0

IBM Rational Collaborative Lifecycle Management=6.0.0

IBM Rational Collaborative Lifecycle Management=6.0.1

IBM Rational Collaborative Lifecycle Management=6.0.3

Event History

Jul 5, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-9733?

CVE-2016-9733 has been classified as a high severity vulnerability due to its potential for cross-site scripting attacks.

How do I fix CVE-2016-9733?

To fix CVE-2016-9733, upgrade IBM Team Concert to a version that addresses the vulnerability, as per IBM's security advisories.

Which versions are affected by CVE-2016-9733?

CVE-2016-9733 affects IBM Team Concert versions 4.0, 5.0, and 6.0, including their minor updates.

What types of attacks could exploit CVE-2016-9733?

CVE-2016-9733 can be exploited to execute arbitrary JavaScript in the web interface, potentially leading to credential theft.

Is CVE-2016-9733 specific to IBM products?

Yes, CVE-2016-9733 is specifically a vulnerability found in IBM Team Concert and IBM Collaborative Lifecycle Management.