PT-2018-4568 · Bmc · Bmc Remedy Action Request System

Published 2018-03-24 · Updated 2018-04-18 · CVE-2015-9257

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions BMC Remedy Action Request (AR) System version 9.0 before 9.0.00 Service Pack 2 hot fix 1

Description The issue is related to a persistent XSS.

Recommendations For versions prior to 9.0.00 Service Pack 2 hot fix 1, update to at least 9.0.00 Service Pack 2 hot fix 1 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2015-9257

Affected Products

Bmc Remedy Action Request System

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-9257 · Security Note
• https://docs.bmc.com/docs/display/public/ars9000/Cross+site+scripting+%28XSS%29+in+Remedy+9.0%2C+9.0+Service+Pack+1 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9257 · Note