Search

Find a vulnerability

Search criteria

    10 vulnerabilities found for rational_doors_web_access by ibm

    CVE-2018-1975 (GCVE-0-2018-1975)

    Vulnerability from nvd – Published: 2019-05-16 14:50 – Updated: 2024-09-16 18:19
    VLAI
    Summary
    IBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153916.
    CWE
    • Cross-Site Scripting
    Assigner
    ibm
    References
    Impacted products
    Vendor Product Version
    IBM Rational DOORS Web Access Affected: 9.5.1
    Affected: 9.5.1.1
    Affected: 9.5.2
    Affected: 9.5.2.1
    Affected: 9.6
    Affected: 9.6.0.1
    Affected: 9.6.1
    Affected: 9.6.1.1
    Affected: 9.6.1.3
    Affected: 9.6.1.4
    Affected: 9.6.1.7
    Affected: 9.6.1.8
    Affected: 9.6.1.9
    Affected: 9.6.1.10
    Affected: 9.6.1.11
    Affected: 9.5.1.2
    Affected: 9.5.1.3
    Affected: 9.5.1.4
    Affected: 9.5.1.5
    Affected: 9.5.1.6
    Affected: 9.5.1.7
    Affected: 9.5.1.8
    Affected: 9.5.1.9
    Affected: 9.5.1.10
    Affected: 9.5.2.2
    Affected: 9.5.2.3
    Affected: 9.5.2.4
    Affected: 9.5.2.5
    Affected: 9.5.2.6
    Affected: 9.5.2.7
    Affected: 9.5.2.8
    Affected: 9.5.2.9
    Affected: 9.6.0.2
    Affected: 9.6.0.3
    Affected: 9.6.0.4
    Affected: 9.6.0.5
    Affected: 9.6.0.6
    Affected: 9.6.0.7
    Affected: 9.6.0.8
    Affected: 9.6.1.2
    Create a notification for this product.
    Date Public
    2019-05-10 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-05T04:14:39.714Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.ibm.com/support/docview.wss?uid=ibm10883198"
              },
              {
                "name": "ibm-dwa-cve20181975-xss (153916)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/153916"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Rational DOORS Web Access",
              "vendor": "IBM",
              "versions": [
                {
                  "status": "affected",
                  "version": "9.5.1"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.1"
                },
                {
                  "status": "affected",
                  "version": "9.5.2"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.1"
                },
                {
                  "status": "affected",
                  "version": "9.6"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.1"
                },
                {
                  "status": "affected",
                  "version": "9.6.1"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.1"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.3"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.4"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.7"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.8"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.9"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.10"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.11"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.2"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.3"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.4"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.5"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.6"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.7"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.8"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.9"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.10"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.2"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.3"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.4"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.5"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.6"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.7"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.8"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.9"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.2"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.3"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.4"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.5"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.6"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.7"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.8"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.2"
                }
              ]
            }
          ],
          "datePublic": "2019-05-10T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "IBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153916."
            }
          ],
          "metrics": [
            {
              "cvssV3_0": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "exploitCodeMaturity": "UNPROVEN",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "remediationLevel": "OFFICIAL_FIX",
                "reportConfidence": "CONFIRMED",
                "scope": "CHANGED",
                "temporalScore": 4.7,
                "temporalSeverity": "MEDIUM",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.0/UI:R/I:L/C:L/S:C/PR:L/AC:L/AV:N/A:N/RL:O/RC:C/E:U",
                "version": "3.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "Cross-Site Scripting",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2019-05-16T14:50:14.000Z",
            "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
            "shortName": "ibm"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.ibm.com/support/docview.wss?uid=ibm10883198"
            },
            {
              "name": "ibm-dwa-cve20181975-xss (153916)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/153916"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "psirt@us.ibm.com",
              "DATE_PUBLIC": "2019-05-10T00:00:00",
              "ID": "CVE-2018-1975",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Rational DOORS Web Access",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "9.5.1"
                              },
                              {
                                "version_value": "9.5.1.1"
                              },
                              {
                                "version_value": "9.5.2"
                              },
                              {
                                "version_value": "9.5.2.1"
                              },
                              {
                                "version_value": "9.6"
                              },
                              {
                                "version_value": "9.6.0.1"
                              },
                              {
                                "version_value": "9.6.1"
                              },
                              {
                                "version_value": "9.6.1.1"
                              },
                              {
                                "version_value": "9.6.1.3"
                              },
                              {
                                "version_value": "9.6.1.4"
                              },
                              {
                                "version_value": "9.6.1.7"
                              },
                              {
                                "version_value": "9.6.1.8"
                              },
                              {
                                "version_value": "9.6.1.9"
                              },
                              {
                                "version_value": "9.6.1.10"
                              },
                              {
                                "version_value": "9.6.1.11"
                              },
                              {
                                "version_value": "9.5.1.2"
                              },
                              {
                                "version_value": "9.5.1.3"
                              },
                              {
                                "version_value": "9.5.1.4"
                              },
                              {
                                "version_value": "9.5.1.5"
                              },
                              {
                                "version_value": "9.5.1.6"
                              },
                              {
                                "version_value": "9.5.1.7"
                              },
                              {
                                "version_value": "9.5.1.8"
                              },
                              {
                                "version_value": "9.5.1.9"
                              },
                              {
                                "version_value": "9.5.1.10"
                              },
                              {
                                "version_value": "9.5.2.2"
                              },
                              {
                                "version_value": "9.5.2.3"
                              },
                              {
                                "version_value": "9.5.2.4"
                              },
                              {
                                "version_value": "9.5.2.5"
                              },
                              {
                                "version_value": "9.5.2.6"
                              },
                              {
                                "version_value": "9.5.2.7"
                              },
                              {
                                "version_value": "9.5.2.8"
                              },
                              {
                                "version_value": "9.5.2.9"
                              },
                              {
                                "version_value": "9.6.0.2"
                              },
                              {
                                "version_value": "9.6.0.3"
                              },
                              {
                                "version_value": "9.6.0.4"
                              },
                              {
                                "version_value": "9.6.0.5"
                              },
                              {
                                "version_value": "9.6.0.6"
                              },
                              {
                                "version_value": "9.6.0.7"
                              },
                              {
                                "version_value": "9.6.0.8"
                              },
                              {
                                "version_value": "9.6.1.2"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "IBM"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "IBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153916."
                }
              ]
            },
            "impact": {
              "cvssv3": {
                "BM": {
                  "A": "N",
                  "AC": "L",
                  "AV": "N",
                  "C": "L",
                  "I": "L",
                  "PR": "L",
                  "S": "C",
                  "UI": "R"
                },
                "TM": {
                  "E": "U",
                  "RC": "C",
                  "RL": "O"
                }
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "Cross-Site Scripting"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://www.ibm.com/support/docview.wss?uid=ibm10883198",
                  "refsource": "CONFIRM",
                  "title": "IBM Security Bulletin 883198 (Rational DOORS Web Access)",
                  "url": "http://www.ibm.com/support/docview.wss?uid=ibm10883198"
                },
                {
                  "name": "ibm-dwa-cve20181975-xss (153916)",
                  "refsource": "XF",
                  "title": "X-Force Vulnerability Report",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/153916"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "assignerShortName": "ibm",
        "cveId": "CVE-2018-1975",
        "datePublished": "2019-05-16T14:50:14.195Z",
        "dateReserved": "2017-12-13T00:00:00.000Z",
        "dateUpdated": "2024-09-16T18:19:45.388Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2011-2682 (GCVE-0-2011-2682)

    Vulnerability from nvd – Published: 2011-07-07 19:00 – Updated: 2024-08-06 23:08
    VLAI
    Summary
    The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Date Public
    2011-06-29 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T23:08:23.819Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "PM38477",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_AIXAPAR",
                  "x_transferred"
                ],
                "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM38477"
              },
              {
                "name": "48520",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/48520"
              },
              {
                "name": "rational-doors-login-dos(68484)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68484"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2011-06-29T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "PM38477",
              "tags": [
                "vendor-advisory",
                "x_refsource_AIXAPAR"
              ],
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM38477"
            },
            {
              "name": "48520",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/48520"
            },
            {
              "name": "rational-doors-login-dos(68484)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68484"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2011-2682",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "PM38477",
                  "refsource": "AIXAPAR",
                  "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM38477"
                },
                {
                  "name": "48520",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/48520"
                },
                {
                  "name": "rational-doors-login-dos(68484)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68484"
                },
                {
                  "name": "http://www.ibm.com/support/docview.wss?uid=swg27020404",
                  "refsource": "CONFIRM",
                  "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2011-2682",
        "datePublished": "2011-07-07T19:00:00.000Z",
        "dateReserved": "2011-07-07T00:00:00.000Z",
        "dateUpdated": "2024-08-06T23:08:23.819Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2011-2681 (GCVE-0-2011-2681)

    Vulnerability from nvd – Published: 2011-07-07 19:00 – Updated: 2024-08-06 23:08
    VLAI
    Summary
    IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://secunia.com/advisories/45119 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/48520 vdb-entryx_refsource_BID
    http://www-01.ibm.com/support/docview.wss?uid=swg… vendor-advisoryx_refsource_AIXAPAR
    http://www.ibm.com/support/docview.wss?uid=swg27020404 x_refsource_CONFIRM
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://osvdb.org/73549 vdb-entryx_refsource_OSVDB
    Date Public
    2011-06-29 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T23:08:23.738Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "45119",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/45119"
              },
              {
                "name": "48520",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/48520"
              },
              {
                "name": "PM34972",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_AIXAPAR",
                  "x_transferred"
                ],
                "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34972"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
              },
              {
                "name": "rational-doors-unspecified(68352)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68352"
              },
              {
                "name": "73549",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/73549"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2011-06-29T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "45119",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/45119"
            },
            {
              "name": "48520",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/48520"
            },
            {
              "name": "PM34972",
              "tags": [
                "vendor-advisory",
                "x_refsource_AIXAPAR"
              ],
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34972"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
            },
            {
              "name": "rational-doors-unspecified(68352)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68352"
            },
            {
              "name": "73549",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/73549"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2011-2681",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "45119",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/45119"
                },
                {
                  "name": "48520",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/48520"
                },
                {
                  "name": "PM34972",
                  "refsource": "AIXAPAR",
                  "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34972"
                },
                {
                  "name": "http://www.ibm.com/support/docview.wss?uid=swg27020404",
                  "refsource": "CONFIRM",
                  "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
                },
                {
                  "name": "rational-doors-unspecified(68352)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68352"
                },
                {
                  "name": "73549",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/73549"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2011-2681",
        "datePublished": "2011-07-07T19:00:00.000Z",
        "dateReserved": "2011-07-07T00:00:00.000Z",
        "dateUpdated": "2024-08-06T23:08:23.738Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2011-2680 (GCVE-0-2011-2680)

    Vulnerability from nvd – Published: 2011-07-07 19:00 – Updated: 2024-08-06 23:08
    VLAI
    Summary
    Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the "server error response."
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://secunia.com/advisories/45119 third-party-advisoryx_refsource_SECUNIA
    http://www-01.ibm.com/support/docview.wss?uid=swg… vendor-advisoryx_refsource_AIXAPAR
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.securityfocus.com/bid/48520 vdb-entryx_refsource_BID
    http://www.ibm.com/support/docview.wss?uid=swg27020404 x_refsource_CONFIRM
    http://osvdb.org/73548 vdb-entryx_refsource_OSVDB
    Date Public
    2011-06-29 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T23:08:23.903Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "45119",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/45119"
              },
              {
                "name": "PM34964",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_AIXAPAR",
                  "x_transferred"
                ],
                "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34964"
              },
              {
                "name": "rational-doors-server-error-unspec(68351)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68351"
              },
              {
                "name": "48520",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/48520"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
              },
              {
                "name": "73548",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/73548"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2011-06-29T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the \"server error response.\""
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "45119",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/45119"
            },
            {
              "name": "PM34964",
              "tags": [
                "vendor-advisory",
                "x_refsource_AIXAPAR"
              ],
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34964"
            },
            {
              "name": "rational-doors-server-error-unspec(68351)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68351"
            },
            {
              "name": "48520",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/48520"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
            },
            {
              "name": "73548",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/73548"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2011-2680",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the \"server error response.\""
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "45119",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/45119"
                },
                {
                  "name": "PM34964",
                  "refsource": "AIXAPAR",
                  "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34964"
                },
                {
                  "name": "rational-doors-server-error-unspec(68351)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68351"
                },
                {
                  "name": "48520",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/48520"
                },
                {
                  "name": "http://www.ibm.com/support/docview.wss?uid=swg27020404",
                  "refsource": "CONFIRM",
                  "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
                },
                {
                  "name": "73548",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/73548"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2011-2680",
        "datePublished": "2011-07-07T19:00:00.000Z",
        "dateReserved": "2011-07-07T00:00:00.000Z",
        "dateUpdated": "2024-08-06T23:08:23.903Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2011-2679 (GCVE-0-2011-2679)

    Vulnerability from nvd – Published: 2011-07-07 19:00 – Updated: 2024-08-06 23:08
    VLAI
    Summary
    Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://secunia.com/advisories/45119 third-party-advisoryx_refsource_SECUNIA
    http://www-01.ibm.com/support/docview.wss?uid=swg… vendor-advisoryx_refsource_AIXAPAR
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.securityfocus.com/bid/48520 vdb-entryx_refsource_BID
    http://www.ibm.com/support/docview.wss?uid=swg27020404 x_refsource_CONFIRM
    http://osvdb.org/73547 vdb-entryx_refsource_OSVDB
    Date Public
    2011-06-29 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T23:08:23.772Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "45119",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/45119"
              },
              {
                "name": "PM34961",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_AIXAPAR",
                  "x_transferred"
                ],
                "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34961"
              },
              {
                "name": "rational-doors-unspec-xss(68350)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68350"
              },
              {
                "name": "48520",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/48520"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
              },
              {
                "name": "73547",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/73547"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2011-06-29T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "45119",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/45119"
            },
            {
              "name": "PM34961",
              "tags": [
                "vendor-advisory",
                "x_refsource_AIXAPAR"
              ],
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34961"
            },
            {
              "name": "rational-doors-unspec-xss(68350)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68350"
            },
            {
              "name": "48520",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/48520"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
            },
            {
              "name": "73547",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/73547"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2011-2679",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "45119",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/45119"
                },
                {
                  "name": "PM34961",
                  "refsource": "AIXAPAR",
                  "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34961"
                },
                {
                  "name": "rational-doors-unspec-xss(68350)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68350"
                },
                {
                  "name": "48520",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/48520"
                },
                {
                  "name": "http://www.ibm.com/support/docview.wss?uid=swg27020404",
                  "refsource": "CONFIRM",
                  "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
                },
                {
                  "name": "73547",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/73547"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2011-2679",
        "datePublished": "2011-07-07T19:00:00.000Z",
        "dateReserved": "2011-07-07T00:00:00.000Z",
        "dateUpdated": "2024-08-06T23:08:23.772Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2018-1975 (GCVE-0-2018-1975)

    Vulnerability from cvelistv5 – Published: 2019-05-16 14:50 – Updated: 2024-09-16 18:19
    VLAI
    Summary
    IBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153916.
    CWE
    • Cross-Site Scripting
    Assigner
    ibm
    References
    Impacted products
    Vendor Product Version
    IBM Rational DOORS Web Access Affected: 9.5.1
    Affected: 9.5.1.1
    Affected: 9.5.2
    Affected: 9.5.2.1
    Affected: 9.6
    Affected: 9.6.0.1
    Affected: 9.6.1
    Affected: 9.6.1.1
    Affected: 9.6.1.3
    Affected: 9.6.1.4
    Affected: 9.6.1.7
    Affected: 9.6.1.8
    Affected: 9.6.1.9
    Affected: 9.6.1.10
    Affected: 9.6.1.11
    Affected: 9.5.1.2
    Affected: 9.5.1.3
    Affected: 9.5.1.4
    Affected: 9.5.1.5
    Affected: 9.5.1.6
    Affected: 9.5.1.7
    Affected: 9.5.1.8
    Affected: 9.5.1.9
    Affected: 9.5.1.10
    Affected: 9.5.2.2
    Affected: 9.5.2.3
    Affected: 9.5.2.4
    Affected: 9.5.2.5
    Affected: 9.5.2.6
    Affected: 9.5.2.7
    Affected: 9.5.2.8
    Affected: 9.5.2.9
    Affected: 9.6.0.2
    Affected: 9.6.0.3
    Affected: 9.6.0.4
    Affected: 9.6.0.5
    Affected: 9.6.0.6
    Affected: 9.6.0.7
    Affected: 9.6.0.8
    Affected: 9.6.1.2
    Create a notification for this product.
    Date Public
    2019-05-10 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-05T04:14:39.714Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.ibm.com/support/docview.wss?uid=ibm10883198"
              },
              {
                "name": "ibm-dwa-cve20181975-xss (153916)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/153916"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Rational DOORS Web Access",
              "vendor": "IBM",
              "versions": [
                {
                  "status": "affected",
                  "version": "9.5.1"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.1"
                },
                {
                  "status": "affected",
                  "version": "9.5.2"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.1"
                },
                {
                  "status": "affected",
                  "version": "9.6"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.1"
                },
                {
                  "status": "affected",
                  "version": "9.6.1"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.1"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.3"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.4"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.7"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.8"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.9"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.10"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.11"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.2"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.3"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.4"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.5"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.6"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.7"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.8"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.9"
                },
                {
                  "status": "affected",
                  "version": "9.5.1.10"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.2"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.3"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.4"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.5"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.6"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.7"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.8"
                },
                {
                  "status": "affected",
                  "version": "9.5.2.9"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.2"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.3"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.4"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.5"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.6"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.7"
                },
                {
                  "status": "affected",
                  "version": "9.6.0.8"
                },
                {
                  "status": "affected",
                  "version": "9.6.1.2"
                }
              ]
            }
          ],
          "datePublic": "2019-05-10T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "IBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153916."
            }
          ],
          "metrics": [
            {
              "cvssV3_0": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 5.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "exploitCodeMaturity": "UNPROVEN",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "remediationLevel": "OFFICIAL_FIX",
                "reportConfidence": "CONFIRMED",
                "scope": "CHANGED",
                "temporalScore": 4.7,
                "temporalSeverity": "MEDIUM",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.0/UI:R/I:L/C:L/S:C/PR:L/AC:L/AV:N/A:N/RL:O/RC:C/E:U",
                "version": "3.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "Cross-Site Scripting",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2019-05-16T14:50:14.000Z",
            "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
            "shortName": "ibm"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.ibm.com/support/docview.wss?uid=ibm10883198"
            },
            {
              "name": "ibm-dwa-cve20181975-xss (153916)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/153916"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "psirt@us.ibm.com",
              "DATE_PUBLIC": "2019-05-10T00:00:00",
              "ID": "CVE-2018-1975",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "Rational DOORS Web Access",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "9.5.1"
                              },
                              {
                                "version_value": "9.5.1.1"
                              },
                              {
                                "version_value": "9.5.2"
                              },
                              {
                                "version_value": "9.5.2.1"
                              },
                              {
                                "version_value": "9.6"
                              },
                              {
                                "version_value": "9.6.0.1"
                              },
                              {
                                "version_value": "9.6.1"
                              },
                              {
                                "version_value": "9.6.1.1"
                              },
                              {
                                "version_value": "9.6.1.3"
                              },
                              {
                                "version_value": "9.6.1.4"
                              },
                              {
                                "version_value": "9.6.1.7"
                              },
                              {
                                "version_value": "9.6.1.8"
                              },
                              {
                                "version_value": "9.6.1.9"
                              },
                              {
                                "version_value": "9.6.1.10"
                              },
                              {
                                "version_value": "9.6.1.11"
                              },
                              {
                                "version_value": "9.5.1.2"
                              },
                              {
                                "version_value": "9.5.1.3"
                              },
                              {
                                "version_value": "9.5.1.4"
                              },
                              {
                                "version_value": "9.5.1.5"
                              },
                              {
                                "version_value": "9.5.1.6"
                              },
                              {
                                "version_value": "9.5.1.7"
                              },
                              {
                                "version_value": "9.5.1.8"
                              },
                              {
                                "version_value": "9.5.1.9"
                              },
                              {
                                "version_value": "9.5.1.10"
                              },
                              {
                                "version_value": "9.5.2.2"
                              },
                              {
                                "version_value": "9.5.2.3"
                              },
                              {
                                "version_value": "9.5.2.4"
                              },
                              {
                                "version_value": "9.5.2.5"
                              },
                              {
                                "version_value": "9.5.2.6"
                              },
                              {
                                "version_value": "9.5.2.7"
                              },
                              {
                                "version_value": "9.5.2.8"
                              },
                              {
                                "version_value": "9.5.2.9"
                              },
                              {
                                "version_value": "9.6.0.2"
                              },
                              {
                                "version_value": "9.6.0.3"
                              },
                              {
                                "version_value": "9.6.0.4"
                              },
                              {
                                "version_value": "9.6.0.5"
                              },
                              {
                                "version_value": "9.6.0.6"
                              },
                              {
                                "version_value": "9.6.0.7"
                              },
                              {
                                "version_value": "9.6.0.8"
                              },
                              {
                                "version_value": "9.6.1.2"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "IBM"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "IBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153916."
                }
              ]
            },
            "impact": {
              "cvssv3": {
                "BM": {
                  "A": "N",
                  "AC": "L",
                  "AV": "N",
                  "C": "L",
                  "I": "L",
                  "PR": "L",
                  "S": "C",
                  "UI": "R"
                },
                "TM": {
                  "E": "U",
                  "RC": "C",
                  "RL": "O"
                }
              }
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "Cross-Site Scripting"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://www.ibm.com/support/docview.wss?uid=ibm10883198",
                  "refsource": "CONFIRM",
                  "title": "IBM Security Bulletin 883198 (Rational DOORS Web Access)",
                  "url": "http://www.ibm.com/support/docview.wss?uid=ibm10883198"
                },
                {
                  "name": "ibm-dwa-cve20181975-xss (153916)",
                  "refsource": "XF",
                  "title": "X-Force Vulnerability Report",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/153916"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "assignerShortName": "ibm",
        "cveId": "CVE-2018-1975",
        "datePublished": "2019-05-16T14:50:14.195Z",
        "dateReserved": "2017-12-13T00:00:00.000Z",
        "dateUpdated": "2024-09-16T18:19:45.388Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2011-2680 (GCVE-0-2011-2680)

    Vulnerability from cvelistv5 – Published: 2011-07-07 19:00 – Updated: 2024-08-06 23:08
    VLAI
    Summary
    Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the "server error response."
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://secunia.com/advisories/45119 third-party-advisoryx_refsource_SECUNIA
    http://www-01.ibm.com/support/docview.wss?uid=swg… vendor-advisoryx_refsource_AIXAPAR
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.securityfocus.com/bid/48520 vdb-entryx_refsource_BID
    http://www.ibm.com/support/docview.wss?uid=swg27020404 x_refsource_CONFIRM
    http://osvdb.org/73548 vdb-entryx_refsource_OSVDB
    Date Public
    2011-06-29 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T23:08:23.903Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "45119",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/45119"
              },
              {
                "name": "PM34964",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_AIXAPAR",
                  "x_transferred"
                ],
                "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34964"
              },
              {
                "name": "rational-doors-server-error-unspec(68351)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68351"
              },
              {
                "name": "48520",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/48520"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
              },
              {
                "name": "73548",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/73548"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2011-06-29T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the \"server error response.\""
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "45119",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/45119"
            },
            {
              "name": "PM34964",
              "tags": [
                "vendor-advisory",
                "x_refsource_AIXAPAR"
              ],
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34964"
            },
            {
              "name": "rational-doors-server-error-unspec(68351)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68351"
            },
            {
              "name": "48520",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/48520"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
            },
            {
              "name": "73548",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/73548"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2011-2680",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the \"server error response.\""
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "45119",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/45119"
                },
                {
                  "name": "PM34964",
                  "refsource": "AIXAPAR",
                  "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34964"
                },
                {
                  "name": "rational-doors-server-error-unspec(68351)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68351"
                },
                {
                  "name": "48520",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/48520"
                },
                {
                  "name": "http://www.ibm.com/support/docview.wss?uid=swg27020404",
                  "refsource": "CONFIRM",
                  "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
                },
                {
                  "name": "73548",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/73548"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2011-2680",
        "datePublished": "2011-07-07T19:00:00.000Z",
        "dateReserved": "2011-07-07T00:00:00.000Z",
        "dateUpdated": "2024-08-06T23:08:23.903Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2011-2681 (GCVE-0-2011-2681)

    Vulnerability from cvelistv5 – Published: 2011-07-07 19:00 – Updated: 2024-08-06 23:08
    VLAI
    Summary
    IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://secunia.com/advisories/45119 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/48520 vdb-entryx_refsource_BID
    http://www-01.ibm.com/support/docview.wss?uid=swg… vendor-advisoryx_refsource_AIXAPAR
    http://www.ibm.com/support/docview.wss?uid=swg27020404 x_refsource_CONFIRM
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://osvdb.org/73549 vdb-entryx_refsource_OSVDB
    Date Public
    2011-06-29 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T23:08:23.738Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "45119",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/45119"
              },
              {
                "name": "48520",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/48520"
              },
              {
                "name": "PM34972",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_AIXAPAR",
                  "x_transferred"
                ],
                "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34972"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
              },
              {
                "name": "rational-doors-unspecified(68352)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68352"
              },
              {
                "name": "73549",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/73549"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2011-06-29T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "45119",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/45119"
            },
            {
              "name": "48520",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/48520"
            },
            {
              "name": "PM34972",
              "tags": [
                "vendor-advisory",
                "x_refsource_AIXAPAR"
              ],
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34972"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
            },
            {
              "name": "rational-doors-unspecified(68352)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68352"
            },
            {
              "name": "73549",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/73549"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2011-2681",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "45119",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/45119"
                },
                {
                  "name": "48520",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/48520"
                },
                {
                  "name": "PM34972",
                  "refsource": "AIXAPAR",
                  "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34972"
                },
                {
                  "name": "http://www.ibm.com/support/docview.wss?uid=swg27020404",
                  "refsource": "CONFIRM",
                  "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
                },
                {
                  "name": "rational-doors-unspecified(68352)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68352"
                },
                {
                  "name": "73549",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/73549"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2011-2681",
        "datePublished": "2011-07-07T19:00:00.000Z",
        "dateReserved": "2011-07-07T00:00:00.000Z",
        "dateUpdated": "2024-08-06T23:08:23.738Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2011-2682 (GCVE-0-2011-2682)

    Vulnerability from cvelistv5 – Published: 2011-07-07 19:00 – Updated: 2024-08-06 23:08
    VLAI
    Summary
    The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Date Public
    2011-06-29 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T23:08:23.819Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "PM38477",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_AIXAPAR",
                  "x_transferred"
                ],
                "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM38477"
              },
              {
                "name": "48520",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/48520"
              },
              {
                "name": "rational-doors-login-dos(68484)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68484"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2011-06-29T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "PM38477",
              "tags": [
                "vendor-advisory",
                "x_refsource_AIXAPAR"
              ],
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM38477"
            },
            {
              "name": "48520",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/48520"
            },
            {
              "name": "rational-doors-login-dos(68484)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68484"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2011-2682",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "PM38477",
                  "refsource": "AIXAPAR",
                  "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM38477"
                },
                {
                  "name": "48520",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/48520"
                },
                {
                  "name": "rational-doors-login-dos(68484)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68484"
                },
                {
                  "name": "http://www.ibm.com/support/docview.wss?uid=swg27020404",
                  "refsource": "CONFIRM",
                  "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2011-2682",
        "datePublished": "2011-07-07T19:00:00.000Z",
        "dateReserved": "2011-07-07T00:00:00.000Z",
        "dateUpdated": "2024-08-06T23:08:23.819Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2011-2679 (GCVE-0-2011-2679)

    Vulnerability from cvelistv5 – Published: 2011-07-07 19:00 – Updated: 2024-08-06 23:08
    VLAI
    Summary
    Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://secunia.com/advisories/45119 third-party-advisoryx_refsource_SECUNIA
    http://www-01.ibm.com/support/docview.wss?uid=swg… vendor-advisoryx_refsource_AIXAPAR
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.securityfocus.com/bid/48520 vdb-entryx_refsource_BID
    http://www.ibm.com/support/docview.wss?uid=swg27020404 x_refsource_CONFIRM
    http://osvdb.org/73547 vdb-entryx_refsource_OSVDB
    Date Public
    2011-06-29 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T23:08:23.772Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "45119",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/45119"
              },
              {
                "name": "PM34961",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_AIXAPAR",
                  "x_transferred"
                ],
                "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34961"
              },
              {
                "name": "rational-doors-unspec-xss(68350)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68350"
              },
              {
                "name": "48520",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/48520"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
              },
              {
                "name": "73547",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/73547"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2011-06-29T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "45119",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/45119"
            },
            {
              "name": "PM34961",
              "tags": [
                "vendor-advisory",
                "x_refsource_AIXAPAR"
              ],
              "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34961"
            },
            {
              "name": "rational-doors-unspec-xss(68350)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68350"
            },
            {
              "name": "48520",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/48520"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
            },
            {
              "name": "73547",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/73547"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2011-2679",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "45119",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/45119"
                },
                {
                  "name": "PM34961",
                  "refsource": "AIXAPAR",
                  "url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM34961"
                },
                {
                  "name": "rational-doors-unspec-xss(68350)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68350"
                },
                {
                  "name": "48520",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/48520"
                },
                {
                  "name": "http://www.ibm.com/support/docview.wss?uid=swg27020404",
                  "refsource": "CONFIRM",
                  "url": "http://www.ibm.com/support/docview.wss?uid=swg27020404"
                },
                {
                  "name": "73547",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/73547"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2011-2679",
        "datePublished": "2011-07-07T19:00:00.000Z",
        "dateReserved": "2011-07-07T00:00:00.000Z",
        "dateUpdated": "2024-08-06T23:08:23.772Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }