CVE-2011-2606

EUVD-2011-2589
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
Affected Products (NVD)
VendorProductVersion
ibmrational_team_concert
3.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/44926
http://www.ibm.com/support/docview.wss?uid=swg1PM40308
http://www.osvdb.org/73198
http://www.securityfocus.com/bid/48356
https://exchange.xforce.ibmcloud.com/vulnerabilities/68119
http://secunia.com/advisories/44926
http://www.ibm.com/support/docview.wss?uid=swg1PM40308
http://www.osvdb.org/73198
http://www.securityfocus.com/bid/48356
https://exchange.xforce.ibmcloud.com/vulnerabilities/68119