CVE-2015-7485

MEDIUM

IBM Rational Engineering Lifecycle Manager <3.0.1.6 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108626.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21983720

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/108626

Scores

CVSS v3 5.4

EPSS 0.0067

EPSS Percentile 48.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (1)

ibm/rational_engineering_lifecycle_manager 3.0 - 3.0.1.6

Published Jan 16, 2018

Tracked Since Feb 18, 2026