CVE-2018-1975

Published: May 16, 2019Modified: Nov 21, 2024

5.4

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153916.

Affected (4)

Products: Ibm: Rational Doors Web Access

Ibm

1 product

Rational Doors Web Access

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational Doors Web Access	From 9.5.1.0 to 9.5.1.11
Ibm Rational Doors Web Access	From 9.5.2.0 to 9.5.2.10
Ibm Rational Doors Web Access	From 9.6.0.0 to 9.6.0.9
Ibm Rational Doors Web Access	From 9.6.1.0 to 9.6.1.12