CVE-2017-1753

{"containers": {"cna": {"affected": [{"product": "Rational DOORS Next Generation", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0.2"}, {"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.3"}, {"status": "affected", "version": "6.0.4"}, {"status": "affected", "version": "6.0.5"}]}, {"product": "Rational Rhapsody Design Manager", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.2"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.3"}, {"status": "affected", "version": "6.0.4"}, {"status": "affected", "version": "6.0.5"}]}, {"product": "Rational Collaborative Lifecycle Management", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "5.0.2"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.3"}, {"status": "affected", "version": "6.0.4"}, {"status": "affected", "version": "6.0.5"}]}, {"product": "Rational Engineering Lifecycle Manager", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "5.0.2"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.3"}, {"status": "affected", "version": "6.0.4"}, {"status": "affected", "version": "6.0.5"}]}, {"product": "Rational Software Architect Design Manager", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.2"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}]}, {"product": "Rational Quality Manager", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "5.0.2"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.3"}, {"status": "affected", "version": "6.0.4"}, {"status": "affected", "version": "6.0.5"}]}, {"product": "Rational Team Concert", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.3"}, {"status": "affected", "version": "6.0.4"}, {"status": "affected", "version": "6.0.5"}]}], "datePublic": "2018-08-16T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Multiple IBM Rational products are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 135655."}], "metrics": [{"cvssV3_0": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "exploitCodeMaturity": "UNPROVEN", "integrityImpact": "LOW", "privilegesRequired": "LOW", "remediationLevel": "OFFICIAL_FIX", "reportConfidence": "CONFIRMED", "scope": "CHANGED", "temporalScore": 4.7, "temporalSeverity": "MEDIUM", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/A:N/AC:L/AV:N/C:L/I:L/PR:L/S:C/UI:R/E:U/RC:C/RL:O", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "Gain Access", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-08-20T20:57:01.000Z", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"name": "ibm-rtc-cve20171753-html-injection(135655)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/135655"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://www.ibm.com/support/docview.wss?uid=ibm10713739"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "DATE_PUBLIC": "2018-08-16T00:00:00", "ID": "CVE-2017-1753", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Rational DOORS Next Generation", "version": {"version_data": [{"version_value": "5.0.2"}, {"version_value": "5.0"}, {"version_value": "5.0.1"}, {"version_value": "6.0"}, {"version_value": "6.0.1"}, {"version_value": "6.0.2"}, {"version_value": "6.0.3"}, {"version_value": "6.0.4"}, {"version_value": "6.0.5"}]}}, {"product_name": "Rational Rhapsody Design Manager", "version": {"version_data": [{"version_value": "5.0"}, {"version_value": "5.0.2"}, {"version_value": "5.0.1"}, {"version_value": "6.0"}, {"version_value": "6.0.1"}, {"version_value": "6.0.2"}, {"version_value": "6.0.3"}, {"version_value": "6.0.4"}, {"version_value": "6.0.5"}]}}, {"product_name": "Rational Collaborative Lifecycle Management", "version": {"version_data": [{"version_value": "5.0"}, {"version_value": "5.0.1"}, {"version_value": "5.0.2"}, {"version_value": "6.0"}, {"version_value": "6.0.1"}, {"version_value": "6.0.2"}, {"version_value": "6.0.3"}, {"version_value": "6.0.4"}, {"version_value": "6.0.5"}]}}, {"product_name": "Rational Engineering Lifecycle Manager", "version": {"version_data": [{"version_value": "5.0"}, {"version_value": "5.0.1"}, {"version_value": "5.0.2"}, {"version_value": "6.0"}, {"version_value": "6.0.1"}, {"version_value": "6.0.2"}, {"version_value": "6.0.3"}, {"version_value": "6.0.4"}, {"version_value": "6.0.5"}]}}, {"product_name": "Rational Software Architect Design Manager", "version": {"version_data": [{"version_value": "5.0"}, {"version_value": "5.0.2"}, {"version_value": "5.0.1"}, {"version_value": "6.0"}, {"version_value": "6.0.1"}]}}, {"product_name": "Rational Quality Manager", "version": {"version_data": [{"version_value": "5.0"}, {"version_value": "5.0.1"}, {"version_value": "5.0.2"}, {"version_value": "6.0"}, {"version_value": "6.0.1"}, {"version_value": "6.0.2"}, {"version_value": "6.0.3"}, {"version_value": "6.0.4"}, {"version_value": "6.0.5"}]}}, {"product_name": "Rational Team Concert", "version": {"version_data": [{"version_value": "5.0"}, {"version_value": "5.0.1"}, {"version_value": "6.0"}, {"version_value": "6.0.1"}, {"version_value": "6.0.2"}, {"version_value": "6.0.3"}, {"version_value": "6.0.4"}, {"version_value": "6.0.5"}]}}]}, "vendor_name": "IBM"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple IBM Rational products are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 135655."}]}, "impact": {"cvssv3": {"BM": {"A": "N", "AC": "L", "AV": "N", "C": "L", "I": "L", "PR": "L", "S": "C", "UI": "R"}, "TM": {"E": "U", "RC": "C", "RL": "O"}}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Gain Access"}]}]}, "references": {"reference_data": [{"name": "ibm-rtc-cve20171753-html-injection(135655)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/135655"}, {"name": "https://www.ibm.com/support/docview.wss?uid=ibm10713739", "refsource": "CONFIRM", "url": "https://www.ibm.com/support/docview.wss?uid=ibm10713739"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T13:39:32.275Z"}, "title": "CVE Program Container", "references": [{"name": "ibm-rtc-cve20171753-html-injection(135655)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/135655"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.ibm.com/support/docview.wss?uid=ibm10713739"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2017-1753", "datePublished": "2018-08-20T21:00:00.000Z", "dateReserved": "2016-11-30T00:00:00.000Z", "dateUpdated": "2024-09-16T21:57:23.676Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "Rational DOORS Next Generation", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0.2"}, {"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.3"}, {"status": "affected", "version": "6.0.4"}, {"status": "affected", "version": "6.0.5"}]}, {"product": "Rational Rhapsody Design Manager", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.2"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.3"}, {"status": "affected", "version": "6.0.4"}, {"status": "affected", "version": "6.0.5"}]}, {"product": "Rational Collaborative Lifecycle Management", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "5.0.2"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.3"}, {"status": "affected", "version": "6.0.4"}, {"status": "affected", "version": "6.0.5"}]}, {"product": "Rational Engineering Lifecycle Manager", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "5.0.2"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.3"}, {"status": "affected", "version": "6.0.4"}, {"status": "affected", "version": "6.0.5"}]}, {"product": "Rational Software Architect Design Manager", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.2"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}]}, {"product": "Rational Quality Manager", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "5.0.2"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.3"}, {"status": "affected", "version": "6.0.4"}, {"status": "affected", "version": "6.0.5"}]}, {"product": "Rational Team Concert", "vendor": "IBM", "versions": [{"status": "affected", "version": "5.0"}, {"status": "affected", "version": "5.0.1"}, {"status": "affected", "version": "6.0"}, {"status": "affected", "version": "6.0.1"}, {"status": "affected", "version": "6.0.2"}, {"status": "affected", "version": "6.0.3"}, {"status": "affected", "version": "6.0.4"}, {"status": "affected", "version": "6.0.5"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*", "matchCriteriaId": "F5C09499-13C3-4F91-A68D-C8FEB77B18DE", "versionEndIncluding": "5.0.2", "versionStartIncluding": "5.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*", "matchCriteriaId": "130C05BE-0919-4A40-9F1E-C7AB4D718D05", "versionEndIncluding": "6.0.5", "versionStartIncluding": "6.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "8BABC587-0E98-4CE1-AD8C-4045D3CA2941", "versionEndIncluding": "5.0.2", "versionStartIncluding": "5.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "D4BE1EAE-1C18-4FC0-A7FB-A58C011CF1F9", "versionEndIncluding": "6.0.5", "versionStartIncluding": "6.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "4EB5653C-C3DD-471B-B644-6E3128CA7401", "versionEndIncluding": "5.0.2", "versionStartIncluding": "5.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "C5C61916-4F4D-4DD3-8F09-F55322767C14", "versionEndIncluding": "6.0.5", "versionStartIncluding": "6.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "3A1EBFE0-1EA4-46A9-866B-3ED2E1187612", "versionEndIncluding": "5.0.2", "versionStartIncluding": "5.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "82E0686F-C62F-4A6A-861E-19467C8018A0", "versionEndIncluding": "6.0.5", "versionStartIncluding": "6.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "A48EFB76-A843-46B9-8840-83DC35330DD3", "versionEndIncluding": "5.0.2", "versionStartIncluding": "5.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "98DCDC04-6FD5-49CB-BC20-757A69C4AC0C", "versionEndIncluding": "6.0.1", "versionStartIncluding": "6.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*", "matchCriteriaId": "909CD52D-BC7A-467F-A88B-15150C6A41ED", "versionEndIncluding": "5.0.2", "versionStartIncluding": "5.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple IBM Rational products are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 135655."}, {"lang": "es", "value": "M\u00faltiples productos IBM Rational son vulnerables a inyecci\u00f3n HTML. Un atacante remoto podr\u00eda ejecutar c\u00f3digo HTML malicioso que, cuando se visualice, se ejecutar\u00eda en el navegador web de la v\u00edctima en el contexto de seguridad del sitio anfitri\u00f3n. IBM X-Force ID: 135655."}], "id": "CVE-2017-1753", "lastModified": "2026-06-17T01:14:48.157", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 3.5, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "psirt@us.ibm.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.3, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-08-20T21:29:00.933", "references": [{"source": "psirt@us.ibm.com", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/135655"}, {"source": "psirt@us.ibm.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://www.ibm.com/support/docview.wss?uid=ibm10713739"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/135655"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://www.ibm.com/support/docview.wss?uid=ibm10713739"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}