CVE-2015-7439
6.1
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD
Description
Cross-site scripting (XSS) vulnerability in InfoSphere Data Architect (IDA), as distributed in IBM Rational Software Architect 8.5 through 9.5, Rational Software Architect for WebSphere Software (RSA4WS) 8.5 through 9.5, and Rational Software Architect RealTime (RSART) 8.5 through 9.5, allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Affected (45)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.5.0 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.5.0 | |
| Version 8.5.5.1 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.5.0 |
References (2)
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.