CVE-2015-0123(ibm / rational_team_concert)

LOWCVSS 3.5 · LOW

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0122.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • rational_team_concert

Affected systems

Vendors
Products
rational_team_concert

21 versions affected across 1 product

Deep dive

Full discourse1 post
  • いと~@t_o_w_w_w

    そう。世界的な機関が脆弱性に管理番号を順番につけてるのですが、10年以上前は「4桁固定」でした。 例)CVE-2015-0123 でも増え続ける脆弱性により変動桁になり、「今年2026年」初めて6桁(100,000)もの脆弱性が見つかりました。 すべてを把握してる人は少ないですが、頭数が急増してます。

    01000171
    474 followersView on X
CPE platform detail21 entries

21 of 21 entries

PartVendorProductVersionTarget SWTarget HW
Appibmrational_team_concert2.0.0.2--
Appibmrational_team_concert3.0--
Appibmrational_team_concert3.0.1--
Appibmrational_team_concert3.0.1.1--
Appibmrational_team_concert3.0.1.2--
Appibmrational_team_concert3.0.1.3--
Appibmrational_team_concert3.0.1.4--
Appibmrational_team_concert3.0.1.5--
Appibmrational_team_concert3.0.1.6--
Appibmrational_team_concert4.0--
Appibmrational_team_concert4.0.0.1--
Appibmrational_team_concert4.0.0.2--
Appibmrational_team_concert4.0.1--
Appibmrational_team_concert4.0.2--
Appibmrational_team_concert4.0.3--
Appibmrational_team_concert4.0.4--
Appibmrational_team_concert4.0.5--
Appibmrational_team_concert4.0.6--
Appibmrational_team_concert4.0.7--
Appibmrational_team_concert5.0.0--
Appibmrational_team_concert5.0.1--

Explore more