CVE-2017-1294: XSS
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125155.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1294?
The severity of CVE-2017-1294 is typically rated as medium due to its potential for cross-site scripting attacks.
How do I fix CVE-2017-1294?
To fix CVE-2017-1294, it is recommended to apply the latest patches provided by IBM for the affected versions of IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management.
Which versions are affected by CVE-2017-1294?
CVE-2017-1294 affects IBM Rational Quality Manager versions 5.0.0 to 5.0.2 and 6.0.0 to 6.0.5, along with IBM Rational Collaborative Lifecycle Management versions 5.0.0 to 5.0.2 and 6.0.0 to 6.0.5.
What type of vulnerability is CVE-2017-1294?
CVE-2017-1294 is a cross-site scripting (XSS) vulnerability that allows the embedding of arbitrary JavaScript code into the web UI.
What are the potential impacts of CVE-2017-1294?
The potential impacts of CVE-2017-1294 include altering the intended functionality of the application and potentially exposing user data to malicious scripts.