CVE-2011-2606

Published: Jun 30, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511.

Affected (1)

Products: Ibm: Rational Team Concert

Ibm

1 product

Rational Team Concert

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Team Concert	Version 3.0

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (10)

http://secunia.com/advisories/44926

Source: cve@mitre.org

Vendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg1PM40308

Source: cve@mitre.org

http://www.osvdb.org/73198

Source: cve@mitre.org

http://www.securityfocus.com/bid/48356

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/68119

Source: cve@mitre.org

http://secunia.com/advisories/44926