CVEvulnerability
CVE-2011-2606
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-06-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511.
Affected configurations
• ibm rational team concert 3.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/44926 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg1PM40308 www.ibm.com
- http://www.osvdb.org/73198 www.osvdb.org
- http://www.securityfocus.com/bid/48356 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68119 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/44926 Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg1PM40308 www.ibm.com
- http://www.osvdb.org/73198 www.osvdb.org
- http://www.securityfocus.com/bid/48356 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68119 exchange.xforce.ibmcloud.com