CVE-2015-7485

Cross-site scripting (XSS) vulnerability in IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108626.

Score

CVSS 3.0 5.4 Medium

Status

Modified - psirt@us.ibm.com

Published

2018-01-16

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Rational Engineering Lifecycle Manager (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21983720
• https://exchange.xforce.ibmcloud.com/vulnerabilities/108626