CVE-2015-0123

Published: Mar 13, 2015Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0122.

Affected (21)

Products: Ibm: Rational Team Concert

Ibm

1 product

Rational Team Concert

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Team Concert	Version 2.0.0.2
Ibm Rational Team Concert	Version 3.0.1.1
Ibm Rational Team Concert	Version 3.0.1.2
Ibm Rational Team Concert	Version 3.0.1.3
Ibm Rational Team Concert	Version 3.0.1.4
Ibm Rational Team Concert	Version 3.0.1.5
Ibm Rational Team Concert	Version 3.0.1.6
Ibm Rational Team Concert	Version 3.0.1
Ibm Rational Team Concert	Version 3.0
Ibm Rational Team Concert	Version 4.0.0.1
Ibm Rational Team Concert	Version 4.0.0.2
Ibm Rational Team Concert	Version 4.0.1
Ibm Rational Team Concert	Version 4.0.2
Ibm Rational Team Concert	Version 4.0.3
Ibm Rational Team Concert	Version 4.0.4
Ibm Rational Team Concert	Version 4.0.5
Ibm Rational Team Concert	Version 4.0.6
Ibm Rational Team Concert	Version 4.0.7
Ibm Rational Team Concert	Version 4.0
Ibm Rational Team Concert	Version 5.0.0
Ibm Rational Team Concert	Version 5.0.1