CVE-2017-1278

{"containers": {"cna": {"affected": [{"product": "Rational DOORS Next Generation", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0.2"}]}, {"product": "Rational DOORS Next Generation", "vendor": "IBM", "versions": [{"status": "affected", "version": "4.0.1"}, {"status": "affected", "version": "4.0.5"}, {"status": "affected", "version": "4.0.2"}, {"status": "affected", "version": "4.0.3"}, {"status": "affected", "version": "4.0.4"}, {"status": "affected", "version": "4.0.6"}, {"status": "affected", "version": "4.0.7"}, {"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.3"}]}], "datePublic": "2017-06-08T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124756."}], "problemTypes": [{"descriptions": [{"description": "Gain Access", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-06-13T09:57:01.000Z", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22002809"}, {"tags": ["x_refsource_MISC"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/124756"}, {"name": "98994", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/98994"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2017-1278", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Rational DOORS Next Generation", "version": {"version_data": [{"version_value": "5.0.2"}]}}, {"product_name": "Rational DOORS Next Generation", "version": {"version_data": [{"version_value": "4.0.1"}, {"version_value": "4.0.5"}, {"version_value": "4.0.2"}, {"version_value": "4.0.3"}, {"version_value": "4.0.4"}, {"version_value": "4.0.6"}, {"version_value": "4.0.7"}, {"version_value": "5.0"}, {"version_value": "5.0.1"}, {"version_value": "6.0"}, {"version_value": "6.0.1"}, {"version_value": "6.0.2"}, {"version_value": "6.0.3"}]}}]}, "vendor_name": "IBM"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124756."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Gain Access"}]}]}, "references": {"reference_data": [{"name": "http://www.ibm.com/support/docview.wss?uid=swg22002809", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=swg22002809"}, {"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/124756", "refsource": "MISC", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/124756"}, {"name": "98994", "refsource": "BID", "url": "http://www.securityfocus.com/bid/98994"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T13:32:27.907Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22002809"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/124756"}, {"name": "98994", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/98994"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2017-1278", "datePublished": "2017-06-12T19:00:00.000Z", "dateReserved": "2016-11-30T00:00:00.000Z", "dateUpdated": "2024-08-05T13:32:27.907Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "Rational DOORS Next Generation", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0.2"}]}, {"product": "Rational DOORS Next Generation", "vendor": "IBM", "versions": [{"status": "affected", "version": "4.0.1"}, {"status": "affected", "version": "4.0.5"}, {"status": "affected", "version": "4.0.2"}, {"status": "affected", "version": "4.0.3"}, {"status": "affected", "version": "4.0.4"}, {"status": "affected", "version": "4.0.6"}, {"status": "affected", "version": "4.0.7"}, {"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.3"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "B2431038-D838-4AB0-B614-EDC1D4D203E2", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "8D76BE6D-5C28-404A-BBF3-E2C9E1596E8C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "6A0BC49A-4D59-47AE-B2D2-13B6719B0932", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "E3AE1241-9998-4F5D-862A-52CE40DB24C8", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "C3F32526-C148-4FCE-B32B-88A8F2BB3A5B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "749C6DAF-EF92-40DD-9CE8-535D1C5BB745", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "27404EC5-26B2-490E-8211-09783FEF084C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "FEAAF6E2-74BE-4FB2-AE49-3C58F68BCEFB", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "44EF2B1F-1CD0-4B6E-8C86-622B0E000F8E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "4EFFBB5B-8566-45BC-9123-5418821E6EB1", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "5BF2CC2A-232C-43A6-8C9B-E6125C051BF9", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_requirements_composer:4.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "2A84EA62-E3F8-4E4C-9FEF-065300C4611A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_requirements_composer:4.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "0232D8EF-1DB3-477D-818C-B79B68406197", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "7E8158D2-ECB0-4F89-BE73-568CA213D9B8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124756."}, {"lang": "es", "value": "IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 y 6.0 es vulnerable a la inyecci\u00f3n de c\u00f3digo HTML. Un atacante remoto podr\u00eda inyectar c\u00f3digo HTML malicioso, el que cuando se vea, se ejecutar\u00eda en el navegador de la v\u00edctima dentro de un contexto seguro del sitio. IBM X-Force ID: 124756."}], "id": "CVE-2017-1278", "lastModified": "2026-06-17T01:14:10.563", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-06-12T19:29:00.307", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22002809"}, {"source": "psirt@us.ibm.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/98994"}, {"source": "psirt@us.ibm.com", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/124756"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg22002809"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/98994"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/124756"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}