Description
Multiple IBM Rational products are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 135655.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
IBM Rational DOORS Next Generation
5.0.2affected5.0affected5.0.1affected6.0affected6.0.1affected6.0.2affected6.0.3affected6.0.4affected6.0.5affected
IBM Rational Rhapsody Design Manager
5.0affected5.0.2affected5.0.1affected6.0affected6.0.1affected6.0.2affected6.0.3affected6.0.4affected6.0.5affected
IBM Rational Collaborative Lifecycle Management
5.0affected5.0.1affected5.0.2affected6.0affected6.0.1affected6.0.2affected6.0.3affected6.0.4affected6.0.5affected
IBM Rational Engineering Lifecycle Manager
5.0affected5.0.1affected5.0.2affected6.0affected6.0.1affected6.0.2affected6.0.3affected6.0.4affected6.0.5affected
IBM Rational Software Architect Design Manager
5.0affected5.0.2affected5.0.1affected6.0affected6.0.1affected
IBM Rational Quality Manager
5.0affected5.0.1affected5.0.2affected6.0affected6.0.1affected6.0.2affected6.0.3affected6.0.4affected6.0.5affected
IBM Rational Team Concert
5.0affected5.0.1affected6.0affected6.0.1affected6.0.2affected6.0.3affected6.0.4affected6.0.5affected