PT-2016-6733 · Ibm · Ibm Rational Doors Next Generation

Published 2016-11-25 · Updated 2016-11-28 · CVE-2016-5955

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Rational DOORS Next Generation versions 6.0.2 before iFix004

Description A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML.

Recommendations For IBM Rational DOORS Next Generation version 6.0.2, apply iFix004 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2016-5955

Affected Products

Ibm Rational Doors Next Generation

References · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg21990054 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-5955 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5955 · Security Note
• http://securityfocus.com/bid/93154 · Note