CVE-2012-2169
IBM Rational Clearquest - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote authenticated users to inject arbitrary web script or HTML via the File Description field.
Scores
EPSS
0.0019
EPSS Percentile
40.4%
Classification
CWE
CWE-79
Status
published
Affected Products (16)
ibm/rational_clearquest
ibm/rational_clearquest
ibm/rational_clearquest
ibm/rational_clearquest
ibm/rational_clearquest
ibm/rational_clearquest
ibm/rational_clearquest
ibm/rational_clearquest
ibm/rational_clearquest
ibm/rational_clearquest
ibm/rational_clearquest
ibm/rational_clearquest
ibm/rational_clearquest
ibm/rational_clearquest
ibm/rational_clearquest
... and 1 more
Timeline
Published
Aug 17, 2012
Tracked Since
Feb 18, 2026