Description
Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x through 2.0.1.1, 3.x before 3.0.1.6 iFix 4, 4.x before 4.0.7 iFix 2, and 5.x before 5.0.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
References (2)
Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21692615
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/95303
Scores
EPSS
0.0076
EPSS Percentile
51.5%
Details
CWE
CWE-79
Status
published
Products (23)
ibm/rational_quality_manager
2.0
ibm/rational_quality_manager
2.0.0.1
ibm/rational_quality_manager
2.0.0.2
ibm/rational_quality_manager
2.0.1
ibm/rational_quality_manager
3.0
ibm/rational_quality_manager
3.0.1
ibm/rational_quality_manager
3.0.1.1
ibm/rational_quality_manager
3.0.1.2
ibm/rational_quality_manager
3.0.1.3
ibm/rational_quality_manager
3.0.1.4
... and 13 more
Published
Dec 19, 2014
Tracked Since
Feb 18, 2026