Show filters
69 Total Results
Displaying 41-50 of 69
Sort by:
Attacker Value
Unknown
CVE-2015-0123
Disclosure Date: March 13, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0122.
0
Attacker Value
Unknown
CVE-2014-3092
Disclosure Date: September 12, 2014 (last updated October 05, 2023)
IBM Jazz Team Server, as used in Rational Collaborative Lifecycle Management; Rational Quality Manager 3.x before 3.0.1.6 iFix 3, 4.x before 4.0.7, and 5.x before 5.0.1; and other Rational products, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
0
Attacker Value
Unknown
CVE-2014-3050
Disclosure Date: July 29, 2014 (last updated October 05, 2023)
IBM Rational Team Concert (RTC) 3.x before 3.0.1.6 IF3 and 4.x before 4.0.7 does not properly integrate with build engines, which allows remote authenticated users to discover credentials via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-3736
Disclosure Date: May 05, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0 before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the name of an attached file.
0
Attacker Value
Unknown
CVE-2013-5404
Disclosure Date: December 10, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IFRAME element.
0
Attacker Value
Unknown
CVE-2013-3369
Disclosure Date: August 23, 2013 (last updated October 05, 2023)
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote authenticated users with the permissions to view the administration pages to execute arbitrary private components via unspecified vectors.
0
Attacker Value
Unknown
CVE-2013-3370
Disclosure Date: August 23, 2013 (last updated October 05, 2023)
Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback components, which allows remote attackers to have an unspecified impact via a direct request.
0
Attacker Value
Unknown
CVE-2013-3373
Disclosure Date: August 23, 2013 (last updated October 05, 2023)
CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header.
0
Attacker Value
Unknown
CVE-2013-5587
Disclosure Date: August 23, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers to inject arbitrary web script or HTML via a URL in a ticket. NOTE: this issue has been SPLIT from CVE-2013-3371 due to different affected versions.
0
Attacker Value
Unknown
CVE-2012-4733
Disclosure Date: August 23, 2013 (last updated October 05, 2023)
Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors.
0
