CVE-2017-1278

Published: Jun 12, 2017Modified: May 13, 2026

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124756.

Affected (15)

Products: Ibm: Rational Doors Next Generation, Rational Requirements Composer

Ibm

2 products

Rational Doors Next Generation

Rational Requirements Composer

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Doors Next Generation	Version 5.0.0
Ibm Rational Doors Next Generation	Version 5.0.1
Ibm Rational Doors Next Generation	Version 5.0.2
Ibm Rational Doors Next Generation	Version 5.0
Ibm Rational Doors Next Generation	Version 6.0.0
Ibm Rational Doors Next Generation	Version 6.0.1
Ibm Rational Doors Next Generation	Version 6.0.2
Ibm Rational Doors Next Generation	Version 6.0.3
Ibm Rational Requirements Composer	Version 4.0.1
Ibm Rational Requirements Composer	Version 4.0.2
Ibm Rational Requirements Composer	Version 4.0.3
Ibm Rational Requirements Composer	Version 4.0.4
Ibm Rational Requirements Composer	Version 4.0.5
Ibm Rational Requirements Composer	Version 4.0.6
Ibm Rational Requirements Composer	Version 4.0.7