← Back

CVE-2017-1753

nvd nist
Published: Aug 20, 2018Modified: Nov 21, 2024

JSON object

Loading...
5.4
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.3 / Impact: 2.7
Source: NVD

Description

Multiple IBM Rational products are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 135655.

Affected (11)

Ibm
6 products
Rational Doors Next Generation
Rational Engineering Lifecycle Manager
Rational Quality Manager
Rational Rhapsody Design Manager
Rational Software Architect Design Manager
Rational Team Concert
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Rational Doors Next Generation
From 5.0.0 to 5.0.2
Rational Doors Next Generation
From 6.0.0 to 6.0.5
Ibm
Rational Engineering Lifecycle Manager
From 5.0.0 to 5.0.2
Rational Engineering Lifecycle Manager
From 6.0.0 to 6.0.5
Ibm
Rational Quality Manager
From 5.0.0 to 5.0.2
Rational Quality Manager
From 6.0.0 to 6.0.5
Ibm
Rational Rhapsody Design Manager
From 5.0.0 to 5.0.2
Rational Rhapsody Design Manager
From 6.0.0 to 6.0.5
Ibm
Rational Software Architect Design Manager
From 5.0.0 to 5.0.2
Rational Software Architect Design Manager
From 6.0.0 to 6.0.1
Rational Team Concert
From 5.0.0 to 5.0.2

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (4)

Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: psirt@us.ibm.com
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory

Timeline

No history available yet.