CVE-2012-5757

Published: Mar 21, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected (24)

Products: Ibm: Rational Clearquest

Ibm

1 product

Rational Clearquest

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Clearquest	Version 7.1.1.1
Ibm Rational Clearquest	Version 7.1.1.2
Ibm Rational Clearquest	Version 7.1.1.3
Ibm Rational Clearquest	Version 7.1.1.4
Ibm Rational Clearquest	Version 7.1.1.5
Ibm Rational Clearquest	Version 7.1.1.6
Ibm Rational Clearquest	Version 7.1.1.7
Ibm Rational Clearquest	Version 7.1.1.8
Ibm Rational Clearquest	Version 7.1.2.1
Ibm Rational Clearquest	Version 7.1.2.2
Ibm Rational Clearquest	Version 7.1.2.3
Ibm Rational Clearquest	Version 7.1.2.4
Ibm Rational Clearquest	Version 7.1.2.5
Ibm Rational Clearquest	Version 7.1.2.6
Ibm Rational Clearquest	Version 7.1.2.7
Ibm Rational Clearquest	Version 7.1.2.8
Ibm Rational Clearquest	Version 7.1.2.9
Ibm Rational Clearquest	Version 7.1.2

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Clearquest	Version 8.0.0.1
Ibm Rational Clearquest	Version 8.0.0.2
Ibm Rational Clearquest	Version 8.0.0.3
Ibm Rational Clearquest	Version 8.0.0.4
Ibm Rational Clearquest	Version 8.0.0.5
Ibm Rational Clearquest	Version 8.0