CVE-2015-7453
Description
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Quality Manager (RQM) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Team Concert (RTC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Requirements Composer (RRC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1 and 4.0.x before 4.0.7 iFix10; Rational DOORS Next Generation (RDNG) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Engineering Lifecycle Manager (RELM) 4.0.3, 4.0.4, 4.0.5, 4.0.6, and 4.0.7 before iFix10, 5.0.x before 5.0.2 iFix1, and 6.0.x before 6.0.2; Rational Rhapsody Design Manager (Rhapsody DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; and Rational Software Architect Design Manager (RSA DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108296.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm rational_collaborative_lifecycle_management | 3.0.1 ≤ v ≤ 6.0.1 | — |
| ibm rational_quality_manager | 3.0 ≤ v ≤ 3.0.1.6, 4.0 ≤ v ≤ 4.0.7, 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1 | — |
| ibm rational_team_concert | 3.0 ≤ v ≤ 3.0.6, 4.0 ≤ v ≤ 4.0.7, 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1 | — |
| ibm rational_requirements_composer | 3.0 ≤ v ≤ 3.0.1.6, 4.0 ≤ v ≤ 4.0.7 | — |
| ibm rational_doors_next_generation | 4.0 ≤ v ≤ 4.0.7, 5.0, 5.0.1, 5.0.2, 6.0.0, 6.0.1 | — |
| ibm rational_engineering_lifecycle_manager | 4.0.3 ≤ v ≤ 4.0.7, 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1 | — |
| ibm rational_rhapsody_design_manager | 4.0 ≤ v ≤ 4.0.7, 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1 | — |
| ibm rational_software_architect_design_manager | 4.0 ≤ v ≤ 4.0.7, 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.