Search
Find a vulnerability
Search criteria
26 vulnerabilities found for engineering_requirements_management_doors by ibm
CVE-2024-43190 (GCVE-0-2024-43190)
Vulnerability from nvd – Published: 2025-07-07 17:45 – Updated: 2025-08-24 11:31
VLAI
Title
IBM Engineering Requirements Management DOORS weak authentication
Summary
IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using man in the middle techniques.
Severity
5.9 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-640 - Weak Password Recovery Mechanism for Forgotten Password
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7238992 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Engineering Requirements Management DOORS |
Affected:
9.7.2.9
cpe:2.3:a:ibm:engineering_requirements_management_doors:9.7.2.9:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-43190",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-07-08T13:38:09.385849Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-07-08T13:38:20.322Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:engineering_requirements_management_doors:9.7.2.9:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "Engineering Requirements Management DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.7.2.9"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using man in the middle techniques."
}
],
"value": "IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using man in the middle techniques."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-640",
"description": "CWE-640 Weak Password Recovery Mechanism for Forgotten Password",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-24T11:31:35.546Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7238992"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM strongly recommends addressing the vulnerabilities now by taking the actions documented in this bulletin.\u003cbr\u003e\u003cbr\u003eFor The IBM Engineering Requirements Management DOORS/DWA product versions 9.7.x, install the fix pack 9.7.2.10.\u003cbr\u003e\u003cbr\u003eYou can download the fix pack for 9.7.2.10 from Fix Central.\u003cbr\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerabilities now by taking the actions documented in this bulletin.\n\nFor The IBM Engineering Requirements Management DOORS/DWA product versions 9.7.x, install the fix pack 9.7.2.10.\n\nYou can download the fix pack for 9.7.2.10 from Fix Central."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Engineering Requirements Management DOORS weak authentication",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2024-43190",
"datePublished": "2025-07-07T17:45:51.426Z",
"dateReserved": "2024-08-07T13:29:48.159Z",
"dateUpdated": "2025-08-24T11:31:35.546Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50304 (GCVE-0-2023-50304)
Vulnerability from nvd – Published: 2024-07-18 16:01 – Updated: 2024-08-02 22:16
VLAI
Title
IBM Engineering Requirements Management DOORS XML external entity injection
Summary
IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 273335.
Severity
7.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-611 - Improper Restriction of XML External Entity Reference
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7160471 | vendor-advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Engineering Requirements Management DOORS |
Affected:
9.7.2.8
cpe:2.3:a:ibm:engineering_requirements_management_doors:9.7.2.7:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50304",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-23T14:41:09.585350Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-23T14:41:54.566Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T22:16:46.319Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.ibm.com/support/pages/node/7160471"
},
{
"tags": [
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/273335"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:engineering_requirements_management_doors:9.7.2.7:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "Engineering Requirements Management DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.7.2.8"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 273335."
}
],
"value": "IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 273335."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-611",
"description": "CWE-611 Improper Restriction of XML External Entity Reference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-07-18T16:01:38.174Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.ibm.com/support/pages/node/7160471"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/273335"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Engineering Requirements Management DOORS XML external entity injection",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2023-50304",
"datePublished": "2024-07-18T16:01:38.174Z",
"dateReserved": "2023-12-07T01:28:46.423Z",
"dateUpdated": "2024-08-02T22:16:46.319Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50305 (GCVE-0-2023-50305)
Vulnerability from nvd – Published: 2024-03-01 01:44 – Updated: 2024-08-02 22:16
VLAI
Title
IBM Engineering Requirements Management information disclosure
Summary
IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 273336.
Severity
5.1 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-521 - Weak Password Requirements
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7124058 | vendor-advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entry |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Engineering Requirements Management |
Affected:
9.7.2.7
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50305",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-03-01T15:39:44.001928Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-05T17:22:05.832Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T22:16:46.041Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.ibm.com/support/pages/node/7124058"
},
{
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/273336"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Engineering Requirements Management",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.7.2.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 273336."
}
],
"value": "IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 273336."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-521",
"description": "CWE-521 Weak Password Requirements",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-01T01:44:34.005Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.ibm.com/support/pages/node/7124058"
},
{
"tags": [
"vdb-entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/273336"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Engineering Requirements Management information disclosure",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2023-50305",
"datePublished": "2024-03-01T01:44:34.005Z",
"dateReserved": "2023-12-07T01:28:46.423Z",
"dateUpdated": "2024-08-02T22:16:46.041Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-28949 (GCVE-0-2023-28949)
Vulnerability from nvd – Published: 2024-03-01 01:47 – Updated: 2024-08-02 13:51
VLAI
Title
IBM Engineering Requirements Management cross-site request forgery
Summary
IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 251216.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-352 - Cross-Site Request Forgery (CSRF)
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7124058 | vendor-advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entry |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Engineering Requirements Management |
Affected:
9.7.2.7
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-28949",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-06-11T17:42:10.709028Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-05T17:22:47.318Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T13:51:38.903Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.ibm.com/support/pages/node/7124058"
},
{
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/251216"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Engineering Requirements Management",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.7.2.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 251216."
}
],
"value": "IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 251216."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-352",
"description": "CWE-352 Cross-Site Request Forgery (CSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-01T01:53:43.368Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.ibm.com/support/pages/node/7124058"
},
{
"tags": [
"vdb-entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/251216"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Engineering Requirements Management cross-site request forgery",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2023-28949",
"datePublished": "2024-03-01T01:47:15.207Z",
"dateReserved": "2023-03-29T01:33:55.064Z",
"dateUpdated": "2024-08-02T13:51:38.903Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-28525 (GCVE-0-2023-28525)
Vulnerability from nvd – Published: 2024-03-01 01:41 – Updated: 2024-08-02 13:43
VLAI
Title
IBM Engineering Requirements Management cross-site scripting
Summary
IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 251052.
Severity
4.8 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7124058 | vendor-advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entry |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Engineering Requirements Management |
Affected:
9.7.2.7
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-28525",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-03-14T19:42:21.681825Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-04T17:28:50.717Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T13:43:23.134Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.ibm.com/support/pages/node/7124058"
},
{
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/251052"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Engineering Requirements Management",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.7.2.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 251052."
}
],
"value": "IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 251052."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-01T01:41:48.557Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.ibm.com/support/pages/node/7124058"
},
{
"tags": [
"vdb-entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/251052"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Engineering Requirements Management cross-site scripting",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2023-28525",
"datePublished": "2024-03-01T01:41:48.557Z",
"dateReserved": "2023-03-16T21:05:56.575Z",
"dateUpdated": "2024-08-02T13:43:23.134Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-1457 (GCVE-0-2018-1457)
Vulnerability from nvd – Published: 2018-06-27 18:00 – Updated: 2024-09-16 16:58
VLAI
Summary
An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges. IBM X-Force ID: 140208.
Severity
CWE
- Bypass Security
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.ibm.com/support/docview.wss?uid=swg22017436 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/104573 | vdb-entryx_refsource_BID |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5.1
Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 Affected: 9.5.1.9 Affected: 9.5.2.8 Affected: 9.6.0.7 Affected: 9.6.1.10 |
Date Public
2018-06-21 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:59:39.070Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ibm-doors-cve20181457-sec-bypass(140208)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/140208"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22017436"
},
{
"name": "104573",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/104573"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
},
{
"status": "affected",
"version": "9.5.1.9"
},
{
"status": "affected",
"version": "9.5.2.8"
},
{
"status": "affected",
"version": "9.6.0.7"
},
{
"status": "affected",
"version": "9.6.1.10"
}
]
}
],
"datePublic": "2018-06-21T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges. IBM X-Force ID: 140208."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitCodeMaturity": "UNPROVEN",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 7.1,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/A:H/AC:H/AV:N/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Bypass Security",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-06-29T09:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"name": "ibm-doors-cve20181457-sec-bypass(140208)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/140208"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22017436"
},
{
"name": "104573",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/104573"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-06-21T00:00:00",
"ID": "CVE-2018-1457",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
},
{
"version_value": "9.5.1.9"
},
{
"version_value": "9.5.2.8"
},
{
"version_value": "9.6.0.7"
},
{
"version_value": "9.6.1.10"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges. IBM X-Force ID: 140208."
}
]
},
"impact": {
"cvssv3": {
"BM": {
"A": "H",
"AC": "H",
"AV": "N",
"C": "H",
"I": "H",
"PR": "N",
"S": "U",
"UI": "N"
},
"TM": {
"E": "U",
"RC": "C",
"RL": "O"
}
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Bypass Security"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ibm-doors-cve20181457-sec-bypass(140208)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/140208"
},
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22017436",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22017436"
},
{
"name": "104573",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/104573"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2018-1457",
"datePublished": "2018-06-27T18:00:00.000Z",
"dateReserved": "2017-12-13T00:00:00.000Z",
"dateUpdated": "2024-09-16T16:58:51.269Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-1567 (GCVE-0-2017-1567)
Vulnerability from nvd – Published: 2018-01-26 21:00 – Updated: 2024-09-16 19:55
VLAI
Summary
IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131769.
Severity
No CVSS data available.
CWE
- Cross-Site Scripting
Assigner
References
3 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/102851 | vdb-entryx_refsource_BID |
| http://www.ibm.com/support/docview.wss?uid=swg22012789 | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5
Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 |
Date Public
2018-01-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T13:39:31.863Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "102851",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/102851"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131769"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5"
},
{
"status": "affected",
"version": "9.5.0.1"
},
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.0.2"
},
{
"status": "affected",
"version": "9.5.0.3"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.0.4"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.0.5"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.0.6"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.0.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
}
]
}
],
"datePublic": "2018-01-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131769."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Cross-Site Scripting",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-05-29T14:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"name": "102851",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/102851"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131769"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-01-23T00:00:00",
"ID": "CVE-2017-1567",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5"
},
{
"version_value": "9.5.0.1"
},
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.0.2"
},
{
"version_value": "9.5.0.3"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.0.4"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.0.5"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.0.6"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.0.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131769."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross-Site Scripting"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "102851",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/102851"
},
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131769",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131769"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2017-1567",
"datePublished": "2018-01-26T21:00:00.000Z",
"dateReserved": "2016-11-30T00:00:00.000Z",
"dateUpdated": "2024-09-16T19:55:55.760Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-1563 (GCVE-0-2017-1563)
Vulnerability from nvd – Published: 2018-01-26 21:00 – Updated: 2024-09-16 17:09
VLAI
Summary
IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131763.
Severity
No CVSS data available.
CWE
- Cross-Site Scripting
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | x_refsource_MISC |
| http://www.ibm.com/support/docview.wss?uid=swg22012789 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/102862 | vdb-entryx_refsource_BID |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5
Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 |
Date Public
2018-01-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T13:39:31.483Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131763"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102862",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/102862"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5"
},
{
"status": "affected",
"version": "9.5.0.1"
},
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.0.2"
},
{
"status": "affected",
"version": "9.5.0.3"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.0.4"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.0.5"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.0.6"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.0.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
}
]
}
],
"datePublic": "2018-01-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131763."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Cross-Site Scripting",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-02-01T10:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131763"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102862",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/102862"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-01-23T00:00:00",
"ID": "CVE-2017-1563",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5"
},
{
"version_value": "9.5.0.1"
},
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.0.2"
},
{
"version_value": "9.5.0.3"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.0.4"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.0.5"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.0.6"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.0.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131763."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross-Site Scripting"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131763",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131763"
},
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102862",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/102862"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2017-1563",
"datePublished": "2018-01-26T21:00:00.000Z",
"dateReserved": "2016-11-30T00:00:00.000Z",
"dateUpdated": "2024-09-16T17:09:01.742Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-1545 (GCVE-0-2017-1545)
Vulnerability from nvd – Published: 2018-01-26 21:00 – Updated: 2024-09-17 00:56
VLAI
Summary
IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials. IBM X-Force ID: 130914.
Severity
No CVSS data available.
CWE
- Gain Access
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | x_refsource_MISC |
| http://www.securityfocus.com/bid/102896 | vdb-entryx_refsource_BID |
| http://www.ibm.com/support/docview.wss?uid=swg22012789 | x_refsource_CONFIRM |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5
Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 |
Date Public
2018-01-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T13:32:30.275Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130914"
},
{
"name": "102896",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/102896"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5"
},
{
"status": "affected",
"version": "9.5.0.1"
},
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.0.2"
},
{
"status": "affected",
"version": "9.5.0.3"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.0.4"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.0.5"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.0.6"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.0.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
}
]
}
],
"datePublic": "2018-01-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials. IBM X-Force ID: 130914."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Gain Access",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-02-02T10:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130914"
},
{
"name": "102896",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/102896"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-01-23T00:00:00",
"ID": "CVE-2017-1545",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5"
},
{
"version_value": "9.5.0.1"
},
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.0.2"
},
{
"version_value": "9.5.0.3"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.0.4"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.0.5"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.0.6"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.0.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials. IBM X-Force ID: 130914."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Gain Access"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130914",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130914"
},
{
"name": "102896",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/102896"
},
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2017-1545",
"datePublished": "2018-01-26T21:00:00.000Z",
"dateReserved": "2016-11-30T00:00:00.000Z",
"dateUpdated": "2024-09-17T00:56:39.534Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-1540 (GCVE-0-2017-1540)
Vulnerability from nvd – Published: 2018-01-26 21:00 – Updated: 2024-09-16 19:36
VLAI
Summary
IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130808.
Severity
No CVSS data available.
CWE
- Cross-Site Scripting
Assigner
References
3 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/102890 | vdb-entryx_refsource_BID |
| http://www.ibm.com/support/docview.wss?uid=swg22012789 | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5
Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 |
Date Public
2018-01-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T13:32:29.645Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "102890",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/102890"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130808"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5"
},
{
"status": "affected",
"version": "9.5.0.1"
},
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.0.2"
},
{
"status": "affected",
"version": "9.5.0.3"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.0.4"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.0.5"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.0.6"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.0.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
}
]
}
],
"datePublic": "2018-01-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130808."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Cross-Site Scripting",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-02-02T10:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"name": "102890",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/102890"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130808"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-01-23T00:00:00",
"ID": "CVE-2017-1540",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5"
},
{
"version_value": "9.5.0.1"
},
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.0.2"
},
{
"version_value": "9.5.0.3"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.0.4"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.0.5"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.0.6"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.0.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130808."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross-Site Scripting"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "102890",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/102890"
},
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130808",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130808"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2017-1540",
"datePublished": "2018-01-26T21:00:00.000Z",
"dateReserved": "2016-11-30T00:00:00.000Z",
"dateUpdated": "2024-09-16T19:36:50.085Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-1532 (GCVE-0-2017-1532)
Vulnerability from nvd – Published: 2018-01-26 21:00 – Updated: 2024-09-16 23:21
VLAI
Summary
IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130411.
Severity
No CVSS data available.
CWE
- Cross-Site Scripting
Assigner
References
3 references
| URL | Tags |
|---|---|
| http://www.ibm.com/support/docview.wss?uid=swg22012789 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/102888 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5
Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 |
Date Public
2018-01-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T13:32:29.935Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102888",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/102888"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130411"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5"
},
{
"status": "affected",
"version": "9.5.0.1"
},
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.0.2"
},
{
"status": "affected",
"version": "9.5.0.3"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.0.4"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.0.5"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.0.6"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.0.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
}
]
}
],
"datePublic": "2018-01-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130411."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Cross-Site Scripting",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-02-02T10:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102888",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/102888"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130411"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-01-23T00:00:00",
"ID": "CVE-2017-1532",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5"
},
{
"version_value": "9.5.0.1"
},
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.0.2"
},
{
"version_value": "9.5.0.3"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.0.4"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.0.5"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.0.6"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.0.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130411."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross-Site Scripting"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102888",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/102888"
},
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130411",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130411"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2017-1532",
"datePublished": "2018-01-26T21:00:00.000Z",
"dateReserved": "2016-11-30T00:00:00.000Z",
"dateUpdated": "2024-09-16T23:21:40.888Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-1516 (GCVE-0-2017-1516)
Vulnerability from nvd – Published: 2018-01-26 21:00 – Updated: 2024-09-16 19:01
VLAI
Summary
IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826.
Severity
No CVSS data available.
CWE
- Gain Access
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | x_refsource_MISC |
| http://www.ibm.com/support/docview.wss?uid=swg22012789 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/102867 | vdb-entryx_refsource_BID |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5
Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 |
Date Public
2018-01-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T13:32:29.949Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102867",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/102867"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5"
},
{
"status": "affected",
"version": "9.5.0.1"
},
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.0.2"
},
{
"status": "affected",
"version": "9.5.0.3"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.0.4"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.0.5"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.0.6"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.0.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
}
]
}
],
"datePublic": "2018-01-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim\u0027s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Gain Access",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-02-01T10:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102867",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/102867"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-01-23T00:00:00",
"ID": "CVE-2017-1516",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5"
},
{
"version_value": "9.5.0.1"
},
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.0.2"
},
{
"version_value": "9.5.0.3"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.0.4"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.0.5"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.0.6"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.0.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim\u0027s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Gain Access"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"
},
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102867",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/102867"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2017-1516",
"datePublished": "2018-01-26T21:00:00.000Z",
"dateReserved": "2016-11-30T00:00:00.000Z",
"dateUpdated": "2024-09-16T19:01:07.973Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-1515 (GCVE-0-2017-1515)
Vulnerability from nvd – Published: 2018-01-26 21:00 – Updated: 2024-09-17 03:59
VLAI
Summary
IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses. IBM X-Force ID: 129825.
Severity
No CVSS data available.
CWE
- Obtain Information
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | x_refsource_MISC |
| http://www.ibm.com/support/docview.wss?uid=swg22012789 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/102872 | vdb-entryx_refsource_BID |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5
Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 |
Date Public
2018-01-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T13:32:29.933Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129825"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102872",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/102872"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5"
},
{
"status": "affected",
"version": "9.5.0.1"
},
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.0.2"
},
{
"status": "affected",
"version": "9.5.0.3"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.0.4"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.0.5"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.0.6"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.0.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
}
]
}
],
"datePublic": "2018-01-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses. IBM X-Force ID: 129825."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Obtain Information",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-02-01T10:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129825"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102872",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/102872"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-01-23T00:00:00",
"ID": "CVE-2017-1515",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5"
},
{
"version_value": "9.5.0.1"
},
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.0.2"
},
{
"version_value": "9.5.0.3"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.0.4"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.0.5"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.0.6"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.0.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses. IBM X-Force ID: 129825."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Obtain Information"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129825",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129825"
},
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102872",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/102872"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2017-1515",
"datePublished": "2018-01-26T21:00:00.000Z",
"dateReserved": "2016-11-30T00:00:00.000Z",
"dateUpdated": "2024-09-17T03:59:44.416Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-43190 (GCVE-0-2024-43190)
Vulnerability from cvelistv5 – Published: 2025-07-07 17:45 – Updated: 2025-08-24 11:31
VLAI
Title
IBM Engineering Requirements Management DOORS weak authentication
Summary
IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using man in the middle techniques.
Severity
5.9 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-640 - Weak Password Recovery Mechanism for Forgotten Password
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7238992 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Engineering Requirements Management DOORS |
Affected:
9.7.2.9
cpe:2.3:a:ibm:engineering_requirements_management_doors:9.7.2.9:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-43190",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-07-08T13:38:09.385849Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-07-08T13:38:20.322Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:engineering_requirements_management_doors:9.7.2.9:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "Engineering Requirements Management DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.7.2.9"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using man in the middle techniques."
}
],
"value": "IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using man in the middle techniques."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-640",
"description": "CWE-640 Weak Password Recovery Mechanism for Forgotten Password",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-24T11:31:35.546Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7238992"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM strongly recommends addressing the vulnerabilities now by taking the actions documented in this bulletin.\u003cbr\u003e\u003cbr\u003eFor The IBM Engineering Requirements Management DOORS/DWA product versions 9.7.x, install the fix pack 9.7.2.10.\u003cbr\u003e\u003cbr\u003eYou can download the fix pack for 9.7.2.10 from Fix Central.\u003cbr\u003e"
}
],
"value": "IBM strongly recommends addressing the vulnerabilities now by taking the actions documented in this bulletin.\n\nFor The IBM Engineering Requirements Management DOORS/DWA product versions 9.7.x, install the fix pack 9.7.2.10.\n\nYou can download the fix pack for 9.7.2.10 from Fix Central."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Engineering Requirements Management DOORS weak authentication",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2024-43190",
"datePublished": "2025-07-07T17:45:51.426Z",
"dateReserved": "2024-08-07T13:29:48.159Z",
"dateUpdated": "2025-08-24T11:31:35.546Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50304 (GCVE-0-2023-50304)
Vulnerability from cvelistv5 – Published: 2024-07-18 16:01 – Updated: 2024-08-02 22:16
VLAI
Title
IBM Engineering Requirements Management DOORS XML external entity injection
Summary
IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 273335.
Severity
7.1 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-611 - Improper Restriction of XML External Entity Reference
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7160471 | vendor-advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Engineering Requirements Management DOORS |
Affected:
9.7.2.8
cpe:2.3:a:ibm:engineering_requirements_management_doors:9.7.2.7:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50304",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-23T14:41:09.585350Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-23T14:41:54.566Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T22:16:46.319Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.ibm.com/support/pages/node/7160471"
},
{
"tags": [
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/273335"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:engineering_requirements_management_doors:9.7.2.7:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "Engineering Requirements Management DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.7.2.8"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 273335."
}
],
"value": "IBM Engineering Requirements Management DOORS Web Access 9.7.2.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 273335."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-611",
"description": "CWE-611 Improper Restriction of XML External Entity Reference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-07-18T16:01:38.174Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.ibm.com/support/pages/node/7160471"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/273335"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Engineering Requirements Management DOORS XML external entity injection",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2023-50304",
"datePublished": "2024-07-18T16:01:38.174Z",
"dateReserved": "2023-12-07T01:28:46.423Z",
"dateUpdated": "2024-08-02T22:16:46.319Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-28949 (GCVE-0-2023-28949)
Vulnerability from cvelistv5 – Published: 2024-03-01 01:47 – Updated: 2024-08-02 13:51
VLAI
Title
IBM Engineering Requirements Management cross-site request forgery
Summary
IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 251216.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-352 - Cross-Site Request Forgery (CSRF)
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7124058 | vendor-advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entry |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Engineering Requirements Management |
Affected:
9.7.2.7
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-28949",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-06-11T17:42:10.709028Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-05T17:22:47.318Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T13:51:38.903Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.ibm.com/support/pages/node/7124058"
},
{
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/251216"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Engineering Requirements Management",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.7.2.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 251216."
}
],
"value": "IBM Engineering Requirements Management DOORS 9.7.2.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 251216."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-352",
"description": "CWE-352 Cross-Site Request Forgery (CSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-01T01:53:43.368Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.ibm.com/support/pages/node/7124058"
},
{
"tags": [
"vdb-entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/251216"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Engineering Requirements Management cross-site request forgery",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2023-28949",
"datePublished": "2024-03-01T01:47:15.207Z",
"dateReserved": "2023-03-29T01:33:55.064Z",
"dateUpdated": "2024-08-02T13:51:38.903Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50305 (GCVE-0-2023-50305)
Vulnerability from cvelistv5 – Published: 2024-03-01 01:44 – Updated: 2024-08-02 22:16
VLAI
Title
IBM Engineering Requirements Management information disclosure
Summary
IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 273336.
Severity
5.1 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-521 - Weak Password Requirements
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7124058 | vendor-advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entry |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Engineering Requirements Management |
Affected:
9.7.2.7
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50305",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-03-01T15:39:44.001928Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-07-05T17:22:05.832Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T22:16:46.041Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.ibm.com/support/pages/node/7124058"
},
{
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/273336"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Engineering Requirements Management",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.7.2.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 273336."
}
],
"value": "IBM Engineering Requirements Management DOORS 9.7.2.7 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 273336."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-521",
"description": "CWE-521 Weak Password Requirements",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-01T01:44:34.005Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.ibm.com/support/pages/node/7124058"
},
{
"tags": [
"vdb-entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/273336"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Engineering Requirements Management information disclosure",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2023-50305",
"datePublished": "2024-03-01T01:44:34.005Z",
"dateReserved": "2023-12-07T01:28:46.423Z",
"dateUpdated": "2024-08-02T22:16:46.041Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-28525 (GCVE-0-2023-28525)
Vulnerability from cvelistv5 – Published: 2024-03-01 01:41 – Updated: 2024-08-02 13:43
VLAI
Title
IBM Engineering Requirements Management cross-site scripting
Summary
IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 251052.
Severity
4.8 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7124058 | vendor-advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entry |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Engineering Requirements Management |
Affected:
9.7.2.7
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-28525",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-03-14T19:42:21.681825Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-06-04T17:28:50.717Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T13:43:23.134Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.ibm.com/support/pages/node/7124058"
},
{
"tags": [
"vdb-entry",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/251052"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Engineering Requirements Management",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.7.2.7"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 251052."
}
],
"value": "IBM Engineering Requirements Management 9.7.2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 251052."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-03-01T01:41:48.557Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.ibm.com/support/pages/node/7124058"
},
{
"tags": [
"vdb-entry"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/251052"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Engineering Requirements Management cross-site scripting",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2023-28525",
"datePublished": "2024-03-01T01:41:48.557Z",
"dateReserved": "2023-03-16T21:05:56.575Z",
"dateUpdated": "2024-08-02T13:43:23.134Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-1457 (GCVE-0-2018-1457)
Vulnerability from cvelistv5 – Published: 2018-06-27 18:00 – Updated: 2024-09-16 16:58
VLAI
Summary
An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges. IBM X-Force ID: 140208.
Severity
CWE
- Bypass Security
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.ibm.com/support/docview.wss?uid=swg22017436 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/104573 | vdb-entryx_refsource_BID |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5.1
Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 Affected: 9.5.1.9 Affected: 9.5.2.8 Affected: 9.6.0.7 Affected: 9.6.1.10 |
Date Public
2018-06-21 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:59:39.070Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ibm-doors-cve20181457-sec-bypass(140208)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/140208"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22017436"
},
{
"name": "104573",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/104573"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
},
{
"status": "affected",
"version": "9.5.1.9"
},
{
"status": "affected",
"version": "9.5.2.8"
},
{
"status": "affected",
"version": "9.6.0.7"
},
{
"status": "affected",
"version": "9.6.1.10"
}
]
}
],
"datePublic": "2018-06-21T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges. IBM X-Force ID: 140208."
}
],
"metrics": [
{
"cvssV3_0": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitCodeMaturity": "UNPROVEN",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"remediationLevel": "OFFICIAL_FIX",
"reportConfidence": "CONFIRMED",
"scope": "UNCHANGED",
"temporalScore": 7.1,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/A:H/AC:H/AV:N/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O",
"version": "3.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Bypass Security",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-06-29T09:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"name": "ibm-doors-cve20181457-sec-bypass(140208)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/140208"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22017436"
},
{
"name": "104573",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/104573"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-06-21T00:00:00",
"ID": "CVE-2018-1457",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
},
{
"version_value": "9.5.1.9"
},
{
"version_value": "9.5.2.8"
},
{
"version_value": "9.6.0.7"
},
{
"version_value": "9.6.1.10"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges. IBM X-Force ID: 140208."
}
]
},
"impact": {
"cvssv3": {
"BM": {
"A": "H",
"AC": "H",
"AV": "N",
"C": "H",
"I": "H",
"PR": "N",
"S": "U",
"UI": "N"
},
"TM": {
"E": "U",
"RC": "C",
"RL": "O"
}
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Bypass Security"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ibm-doors-cve20181457-sec-bypass(140208)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/140208"
},
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22017436",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22017436"
},
{
"name": "104573",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/104573"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2018-1457",
"datePublished": "2018-06-27T18:00:00.000Z",
"dateReserved": "2017-12-13T00:00:00.000Z",
"dateUpdated": "2024-09-16T16:58:51.269Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-1532 (GCVE-0-2017-1532)
Vulnerability from cvelistv5 – Published: 2018-01-26 21:00 – Updated: 2024-09-16 23:21
VLAI
Summary
IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130411.
Severity
No CVSS data available.
CWE
- Cross-Site Scripting
Assigner
References
3 references
| URL | Tags |
|---|---|
| http://www.ibm.com/support/docview.wss?uid=swg22012789 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/102888 | vdb-entryx_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5
Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 |
Date Public
2018-01-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T13:32:29.935Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102888",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/102888"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130411"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5"
},
{
"status": "affected",
"version": "9.5.0.1"
},
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.0.2"
},
{
"status": "affected",
"version": "9.5.0.3"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.0.4"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.0.5"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.0.6"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.0.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
}
]
}
],
"datePublic": "2018-01-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130411."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Cross-Site Scripting",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-02-02T10:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102888",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/102888"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130411"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-01-23T00:00:00",
"ID": "CVE-2017-1532",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5"
},
{
"version_value": "9.5.0.1"
},
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.0.2"
},
{
"version_value": "9.5.0.3"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.0.4"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.0.5"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.0.6"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.0.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130411."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross-Site Scripting"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102888",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/102888"
},
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130411",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130411"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2017-1532",
"datePublished": "2018-01-26T21:00:00.000Z",
"dateReserved": "2016-11-30T00:00:00.000Z",
"dateUpdated": "2024-09-16T23:21:40.888Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-1515 (GCVE-0-2017-1515)
Vulnerability from cvelistv5 – Published: 2018-01-26 21:00 – Updated: 2024-09-17 03:59
VLAI
Summary
IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses. IBM X-Force ID: 129825.
Severity
No CVSS data available.
CWE
- Obtain Information
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | x_refsource_MISC |
| http://www.ibm.com/support/docview.wss?uid=swg22012789 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/102872 | vdb-entryx_refsource_BID |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5
Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 |
Date Public
2018-01-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T13:32:29.933Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129825"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102872",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/102872"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5"
},
{
"status": "affected",
"version": "9.5.0.1"
},
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.0.2"
},
{
"status": "affected",
"version": "9.5.0.3"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.0.4"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.0.5"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.0.6"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.0.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
}
]
}
],
"datePublic": "2018-01-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses. IBM X-Force ID: 129825."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Obtain Information",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-02-01T10:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129825"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102872",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/102872"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-01-23T00:00:00",
"ID": "CVE-2017-1515",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5"
},
{
"version_value": "9.5.0.1"
},
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.0.2"
},
{
"version_value": "9.5.0.3"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.0.4"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.0.5"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.0.6"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.0.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responses. IBM X-Force ID: 129825."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Obtain Information"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129825",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129825"
},
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102872",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/102872"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2017-1515",
"datePublished": "2018-01-26T21:00:00.000Z",
"dateReserved": "2016-11-30T00:00:00.000Z",
"dateUpdated": "2024-09-17T03:59:44.416Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-1516 (GCVE-0-2017-1516)
Vulnerability from cvelistv5 – Published: 2018-01-26 21:00 – Updated: 2024-09-16 19:01
VLAI
Summary
IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826.
Severity
No CVSS data available.
CWE
- Gain Access
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | x_refsource_MISC |
| http://www.ibm.com/support/docview.wss?uid=swg22012789 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/102867 | vdb-entryx_refsource_BID |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5
Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 |
Date Public
2018-01-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T13:32:29.949Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102867",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/102867"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5"
},
{
"status": "affected",
"version": "9.5.0.1"
},
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.0.2"
},
{
"status": "affected",
"version": "9.5.0.3"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.0.4"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.0.5"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.0.6"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.0.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
}
]
}
],
"datePublic": "2018-01-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim\u0027s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Gain Access",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-02-01T10:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102867",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/102867"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-01-23T00:00:00",
"ID": "CVE-2017-1516",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5"
},
{
"version_value": "9.5.0.1"
},
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.0.2"
},
{
"version_value": "9.5.0.3"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.0.4"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.0.5"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.0.6"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.0.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Doors Web Access 9.5 and 9.6 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim\u0027s click actions and possibly launch further attacks against the victim. IBM X-Force ID: 129826."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Gain Access"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/129826"
},
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102867",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/102867"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2017-1516",
"datePublished": "2018-01-26T21:00:00.000Z",
"dateReserved": "2016-11-30T00:00:00.000Z",
"dateUpdated": "2024-09-16T19:01:07.973Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-1540 (GCVE-0-2017-1540)
Vulnerability from cvelistv5 – Published: 2018-01-26 21:00 – Updated: 2024-09-16 19:36
VLAI
Summary
IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130808.
Severity
No CVSS data available.
CWE
- Cross-Site Scripting
Assigner
References
3 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/102890 | vdb-entryx_refsource_BID |
| http://www.ibm.com/support/docview.wss?uid=swg22012789 | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5
Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 |
Date Public
2018-01-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T13:32:29.645Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "102890",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/102890"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130808"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5"
},
{
"status": "affected",
"version": "9.5.0.1"
},
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.0.2"
},
{
"status": "affected",
"version": "9.5.0.3"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.0.4"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.0.5"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.0.6"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.0.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
}
]
}
],
"datePublic": "2018-01-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130808."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Cross-Site Scripting",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-02-02T10:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"name": "102890",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/102890"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130808"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-01-23T00:00:00",
"ID": "CVE-2017-1540",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5"
},
{
"version_value": "9.5.0.1"
},
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.0.2"
},
{
"version_value": "9.5.0.3"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.0.4"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.0.5"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.0.6"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.0.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130808."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross-Site Scripting"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "102890",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/102890"
},
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130808",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130808"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2017-1540",
"datePublished": "2018-01-26T21:00:00.000Z",
"dateReserved": "2016-11-30T00:00:00.000Z",
"dateUpdated": "2024-09-16T19:36:50.085Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-1545 (GCVE-0-2017-1545)
Vulnerability from cvelistv5 – Published: 2018-01-26 21:00 – Updated: 2024-09-17 00:56
VLAI
Summary
IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials. IBM X-Force ID: 130914.
Severity
No CVSS data available.
CWE
- Gain Access
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | x_refsource_MISC |
| http://www.securityfocus.com/bid/102896 | vdb-entryx_refsource_BID |
| http://www.ibm.com/support/docview.wss?uid=swg22012789 | x_refsource_CONFIRM |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5
Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 |
Date Public
2018-01-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T13:32:30.275Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130914"
},
{
"name": "102896",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/102896"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5"
},
{
"status": "affected",
"version": "9.5.0.1"
},
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.0.2"
},
{
"status": "affected",
"version": "9.5.0.3"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.0.4"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.0.5"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.0.6"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.0.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
}
]
}
],
"datePublic": "2018-01-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials. IBM X-Force ID: 130914."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Gain Access",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-02-02T10:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130914"
},
{
"name": "102896",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/102896"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-01-23T00:00:00",
"ID": "CVE-2017-1545",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5"
},
{
"version_value": "9.5.0.1"
},
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.0.2"
},
{
"version_value": "9.5.0.3"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.0.4"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.0.5"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.0.6"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.0.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials. IBM X-Force ID: 130914."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Gain Access"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130914",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/130914"
},
{
"name": "102896",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/102896"
},
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2017-1545",
"datePublished": "2018-01-26T21:00:00.000Z",
"dateReserved": "2016-11-30T00:00:00.000Z",
"dateUpdated": "2024-09-17T00:56:39.534Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-1563 (GCVE-0-2017-1563)
Vulnerability from cvelistv5 – Published: 2018-01-26 21:00 – Updated: 2024-09-16 17:09
VLAI
Summary
IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131763.
Severity
No CVSS data available.
CWE
- Cross-Site Scripting
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | x_refsource_MISC |
| http://www.ibm.com/support/docview.wss?uid=swg22012789 | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/102862 | vdb-entryx_refsource_BID |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5
Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 |
Date Public
2018-01-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T13:39:31.483Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131763"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102862",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/102862"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5"
},
{
"status": "affected",
"version": "9.5.0.1"
},
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.0.2"
},
{
"status": "affected",
"version": "9.5.0.3"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.0.4"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.0.5"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.0.6"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.0.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
}
]
}
],
"datePublic": "2018-01-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131763."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Cross-Site Scripting",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-02-01T10:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131763"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102862",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/102862"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-01-23T00:00:00",
"ID": "CVE-2017-1563",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5"
},
{
"version_value": "9.5.0.1"
},
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.0.2"
},
{
"version_value": "9.5.0.3"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.0.4"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.0.5"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.0.6"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.0.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131763."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross-Site Scripting"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131763",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131763"
},
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "102862",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/102862"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2017-1563",
"datePublished": "2018-01-26T21:00:00.000Z",
"dateReserved": "2016-11-30T00:00:00.000Z",
"dateUpdated": "2024-09-16T17:09:01.742Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2017-1567 (GCVE-0-2017-1567)
Vulnerability from cvelistv5 – Published: 2018-01-26 21:00 – Updated: 2024-09-16 19:55
VLAI
Summary
IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131769.
Severity
No CVSS data available.
CWE
- Cross-Site Scripting
Assigner
References
3 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/102851 | vdb-entryx_refsource_BID |
| http://www.ibm.com/support/docview.wss?uid=swg22012789 | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Rational DOORS |
Affected:
9.5
Affected: 9.5.0.1 Affected: 9.5.1 Affected: 9.5.1.1 Affected: 9.5.1.2 Affected: 9.5.2 Affected: 9.5.2.1 Affected: 9.6 Affected: 9.5.0.2 Affected: 9.5.0.3 Affected: 9.5.1.3 Affected: 9.5.1.4 Affected: 9.5.2.2 Affected: 9.5.2.3 Affected: 9.6.0.1 Affected: 9.6.0.2 Affected: 9.6.1 Affected: 9.6.1.1 Affected: 9.5.0.4 Affected: 9.5.1.5 Affected: 9.5.2.4 Affected: 9.6.0.3 Affected: 9.6.1.2 Affected: 9.6.1.3 Affected: 9.6.1.4 Affected: 9.5.0.5 Affected: 9.5.1.6 Affected: 9.5.2.5 Affected: 9.6.0.4 Affected: 9.5.0.6 Affected: 9.5.1.7 Affected: 9.5.2.6 Affected: 9.6.0.5 Affected: 9.6.1.5 Affected: 9.6.1.6 Affected: 9.6.1.7 Affected: 9.5.0.7 Affected: 9.5.1.8 Affected: 9.5.2.7 Affected: 9.6.0.6 Affected: 9.6.1.8 Affected: 9.6.1.9 |
Date Public
2018-01-23 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T13:39:31.863Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "102851",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/102851"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131769"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Rational DOORS",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "9.5"
},
{
"status": "affected",
"version": "9.5.0.1"
},
{
"status": "affected",
"version": "9.5.1"
},
{
"status": "affected",
"version": "9.5.1.1"
},
{
"status": "affected",
"version": "9.5.1.2"
},
{
"status": "affected",
"version": "9.5.2"
},
{
"status": "affected",
"version": "9.5.2.1"
},
{
"status": "affected",
"version": "9.6"
},
{
"status": "affected",
"version": "9.5.0.2"
},
{
"status": "affected",
"version": "9.5.0.3"
},
{
"status": "affected",
"version": "9.5.1.3"
},
{
"status": "affected",
"version": "9.5.1.4"
},
{
"status": "affected",
"version": "9.5.2.2"
},
{
"status": "affected",
"version": "9.5.2.3"
},
{
"status": "affected",
"version": "9.6.0.1"
},
{
"status": "affected",
"version": "9.6.0.2"
},
{
"status": "affected",
"version": "9.6.1"
},
{
"status": "affected",
"version": "9.6.1.1"
},
{
"status": "affected",
"version": "9.5.0.4"
},
{
"status": "affected",
"version": "9.5.1.5"
},
{
"status": "affected",
"version": "9.5.2.4"
},
{
"status": "affected",
"version": "9.6.0.3"
},
{
"status": "affected",
"version": "9.6.1.2"
},
{
"status": "affected",
"version": "9.6.1.3"
},
{
"status": "affected",
"version": "9.6.1.4"
},
{
"status": "affected",
"version": "9.5.0.5"
},
{
"status": "affected",
"version": "9.5.1.6"
},
{
"status": "affected",
"version": "9.5.2.5"
},
{
"status": "affected",
"version": "9.6.0.4"
},
{
"status": "affected",
"version": "9.5.0.6"
},
{
"status": "affected",
"version": "9.5.1.7"
},
{
"status": "affected",
"version": "9.5.2.6"
},
{
"status": "affected",
"version": "9.6.0.5"
},
{
"status": "affected",
"version": "9.6.1.5"
},
{
"status": "affected",
"version": "9.6.1.6"
},
{
"status": "affected",
"version": "9.6.1.7"
},
{
"status": "affected",
"version": "9.5.0.7"
},
{
"status": "affected",
"version": "9.5.1.8"
},
{
"status": "affected",
"version": "9.5.2.7"
},
{
"status": "affected",
"version": "9.6.0.6"
},
{
"status": "affected",
"version": "9.6.1.8"
},
{
"status": "affected",
"version": "9.6.1.9"
}
]
}
],
"datePublic": "2018-01-23T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131769."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Cross-Site Scripting",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-05-29T14:57:01.000Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"name": "102851",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/102851"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131769"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@us.ibm.com",
"DATE_PUBLIC": "2018-01-23T00:00:00",
"ID": "CVE-2017-1567",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Rational DOORS",
"version": {
"version_data": [
{
"version_value": "9.5"
},
{
"version_value": "9.5.0.1"
},
{
"version_value": "9.5.1"
},
{
"version_value": "9.5.1.1"
},
{
"version_value": "9.5.1.2"
},
{
"version_value": "9.5.2"
},
{
"version_value": "9.5.2.1"
},
{
"version_value": "9.6"
},
{
"version_value": "9.5.0.2"
},
{
"version_value": "9.5.0.3"
},
{
"version_value": "9.5.1.3"
},
{
"version_value": "9.5.1.4"
},
{
"version_value": "9.5.2.2"
},
{
"version_value": "9.5.2.3"
},
{
"version_value": "9.6.0.1"
},
{
"version_value": "9.6.0.2"
},
{
"version_value": "9.6.1"
},
{
"version_value": "9.6.1.1"
},
{
"version_value": "9.5.0.4"
},
{
"version_value": "9.5.1.5"
},
{
"version_value": "9.5.2.4"
},
{
"version_value": "9.6.0.3"
},
{
"version_value": "9.6.1.2"
},
{
"version_value": "9.6.1.3"
},
{
"version_value": "9.6.1.4"
},
{
"version_value": "9.5.0.5"
},
{
"version_value": "9.5.1.6"
},
{
"version_value": "9.5.2.5"
},
{
"version_value": "9.6.0.4"
},
{
"version_value": "9.5.0.6"
},
{
"version_value": "9.5.1.7"
},
{
"version_value": "9.5.2.6"
},
{
"version_value": "9.6.0.5"
},
{
"version_value": "9.6.1.5"
},
{
"version_value": "9.6.1.6"
},
{
"version_value": "9.6.1.7"
},
{
"version_value": "9.5.0.7"
},
{
"version_value": "9.5.1.8"
},
{
"version_value": "9.5.2.7"
},
{
"version_value": "9.6.0.6"
},
{
"version_value": "9.6.1.8"
},
{
"version_value": "9.6.1.9"
}
]
}
}
]
},
"vendor_name": "IBM"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131769."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Cross-Site Scripting"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "102851",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/102851"
},
{
"name": "http://www.ibm.com/support/docview.wss?uid=swg22012789",
"refsource": "CONFIRM",
"url": "http://www.ibm.com/support/docview.wss?uid=swg22012789"
},
{
"name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131769",
"refsource": "MISC",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/131769"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2017-1567",
"datePublished": "2018-01-26T21:00:00.000Z",
"dateReserved": "2016-11-30T00:00:00.000Z",
"dateUpdated": "2024-09-16T19:55:55.760Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}