CVE-2019-4748

Published: Jul 16, 2020Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 173174.

Affected (20)

Products: Ibm: Collaborative Lifecycle Management, Doors Next, Engineering Lifecycle Manager, Engineering Test Management, Engineering Workflow Management, Rational Doors Next Generation, Rational Quality Manager, Rational Team Concert, Reference Data Management, Rhapsody Design Manager

Ibm

10 products

Collaborative Lifecycle Management

Doors Next

Engineering Lifecycle Manager

Engineering Test Management

Engineering Workflow Management

Rational Doors Next Generation

Rational Quality Manager

Rational Team Concert

Reference Data Management

Rhapsody Design Manager

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Ibm Collaborative Lifecycle Management	Version 6.0.2
Ibm Collaborative Lifecycle Management	Version 6.0.6.1
Ibm Collaborative Lifecycle Management	Version 6.0.6
Ibm Doors Next	Version 7.0
Ibm Engineering Lifecycle Manager	Version 7.0
Ibm Engineering Test Management	Version 7.0
Ibm Engineering Workflow Management	Version 7.0
Ibm Rational Doors Next Generation	Version 6.0.2
Ibm Rational Doors Next Generation	Version 6.0.6.1
Ibm Rational Doors Next Generation	Version 6.0.6
Ibm Rational Quality Manager	Version 6.0.2
Ibm Rational Quality Manager	Version 6.0.6.1
Ibm Rational Quality Manager	Version 6.0.6
Ibm Rational Team Concert	Version 6.0.2
Ibm Rational Team Concert	Version 6.0.6.1
Ibm Rational Team Concert	Version 6.0.6
Ibm Reference Data Management	Version 7.0
Ibm Rhapsody Design Manager	Version 6.0.2
Ibm Rhapsody Design Manager	Version 6.0.6.1
Ibm Rhapsody Design Manager	Version 6.0.6