CVE-2016-0331

Published: Sep 12, 2016Modified: May 6, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2 iFix2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected (4)

Products: Ibm: Rational Collaborative Lifecycle Management, Rational Team Concert

Ibm

2 products

Rational Collaborative Lifecycle Management

Rational Team Concert

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Collaborative Lifecycle Management	Version 6.0.1
Ibm Rational Collaborative Lifecycle Management	Version 6.0.2
Ibm Rational Team Concert	Version 6.0.1
Ibm Rational Team Concert	Version 6.0.2