Show filters
146 Total Results
Displaying 141-146 of 146
Sort by:
Attacker Value
Unknown
CVE-2014-3050
Disclosure Date: July 29, 2014 (last updated October 05, 2023)
IBM Rational Team Concert (RTC) 3.x before 3.0.1.6 IF3 and 4.x before 4.0.7 does not properly integrate with build engines, which allows remote authenticated users to discover credentials via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-5404
Disclosure Date: December 10, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IFRAME element.
0
Attacker Value
Unknown
CVE-2012-0748
Disclosure Date: October 01, 2012 (last updated October 05, 2023)
Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified services in IBM Rational Team Concert (RTC) 4.x before 4.0.0.1 allow remote attackers to hijack the authentication of arbitrary users for requests that modify work items.
0
Attacker Value
Unknown
CVE-2011-2607
Disclosure Date: June 30, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165513.
0
Attacker Value
Unknown
CVE-2011-2606
Disclosure Date: June 30, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511.
0
Attacker Value
Unknown
CVE-2011-1029
Disclosure Date: February 14, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 2.0.0.x allows remote authenticated users to inject arbitrary web script or HTML via the name of a shared report.
0
