CVEvulnerability
CVE-2008-5325
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-12-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• ibm rational clearquest (>= 7.0.0.0 < 7.0.0.4)
• ibm rational clearquest (>= 7.0.1 < 7.0.1.3)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/32847 Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK69316 Vendor Advisory
- http://www.osvdb.org/50369 Broken Link
- http://www.securityfocus.com/bid/32576 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/32847 Third Party Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1PK69316 Vendor Advisory
- http://www.osvdb.org/50369 Broken Link
- http://www.securityfocus.com/bid/32576 Third Party Advisory, VDB Entry