Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2017-1540

IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended

Description

IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130808.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Rational DOORS

  • 9.5affected
  • 9.5.0.1affected
  • 9.5.1affected
  • 9.5.1.1affected
  • 9.5.1.2affected
  • 9.5.2affected
  • 9.5.2.1affected
  • 9.6affected
  • 9.5.0.2affected
  • 9.5.0.3affected
  • 9.5.1.3affected
  • 9.5.1.4affected
  • 9.5.2.2affected
  • 9.5.2.3affected
  • 9.6.0.1affected
  • 9.6.0.2affected
  • 9.6.1affected
  • 9.6.1.1affected
  • 9.5.0.4affected
  • 9.5.1.5affected
  • 9.5.2.4affected
  • 9.6.0.3affected
  • 9.6.1.2affected
  • 9.6.1.3affected
  • 9.6.1.4affected
  • 9.5.0.5affected
  • 9.5.1.6affected
  • 9.5.2.5affected
  • 9.6.0.4affected
  • 9.5.0.6affected
  • 9.5.1.7affected
  • 9.5.2.6affected
  • 9.6.0.5affected
  • 9.6.1.5affected
  • 9.6.1.6affected
  • 9.6.1.7affected
  • 9.5.0.7affected
  • 9.5.1.8affected
  • 9.5.2.7affected
  • 9.6.0.6affected
  • 9.6.1.8affected
  • 9.6.1.9affected

References