CVEvulnerability

CVE-2013-5404

3.5 LOW Published 2013-12-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-12-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IFRAME element.

Affected configurations

• ibm rational quality manager 2.0 • ibm rational quality manager 2.0.0.1 • ibm rational quality manager 2.0.0.2 • ibm rational quality manager 2.0.1 • ibm rational quality manager 2.0.1.1 • ibm rational quality manager 3.0 • ibm rational quality manager 3.0.1 • ibm rational quality manager 3.0.1.1 • ibm rational quality manager 3.0.1.2 • ibm rational quality manager 3.0.1.3 • ibm rational quality manager 3.0.1.4 • ibm rational quality manager 3.0.1.5 • ibm rational quality manager 3.0.1.6 • ibm rational quality manager 4.0 • ibm rational quality manager 4.0.0.1 • ibm rational quality manager 4.0.0.2 • ibm rational quality manager 4.0.1 • ibm rational quality manager 4.0.2 • ibm rational quality manager 4.0.3 • ibm rational quality manager 4.0.4 • ibm rational requirements composer 2.0 • ibm rational requirements composer 2.0.0.1 • ibm rational requirements composer 2.0.0.2 • ibm rational requirements composer 2.0.0.3 • ibm rational requirements composer 2.0.0.4 • ibm rational requirements composer 3.0 • ibm rational requirements composer 3.0.1 • ibm rational requirements composer 3.0.1.1 • ibm rational requirements composer 3.0.1.2 • ibm rational requirements composer 3.0.1.3 • ibm rational requirements composer 3.0.1.4 • ibm rational requirements composer 3.0.1.5 • ibm rational requirements composer 3.0.1.6 • ibm rational requirements composer 4.0 • ibm rational requirements composer 4.0.1 • ibm rational requirements composer 4.0.2 • ibm rational requirements composer 4.0.3 • ibm rational requirements composer 4.0.4 • ibm rational team concert 2.0 • ibm rational team concert 2.0.0.1 • ibm rational team concert 2.0.0.2 • ibm rational team concert 3.0 • ibm rational team concert 3.0.1 • ibm rational team concert 3.0.1.2 • ibm rational team concert 3.0.1.3 • ibm rational team concert 3.0.1.4 • ibm rational team concert 3.0.1.5 • ibm rational team concert 3.0.1.6 • ibm rational team concert 4.0 • ibm rational team concert 4.0.1 • ibm rational team concert 4.0.2 • ibm rational team concert 4.0.3 • ibm rational team concert 4.0.4 • ibm rational team concert 4.0.5

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References