CVE-2015-0122

Published Mar 13, 2015 CVSS 2.0 · 3.5 Low EPSS 1.4% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0123.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2015-0160 Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0123.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
ibm
Published
Updated
Aug 6, 2024, 3:55 AM
Reserved
Nov 18, 2014, 12:00 AM
Status
Modified
Published
Mar 13, 2015, 1:59 AM
Modified
Jun 17, 2026, 12:19 AM