Vulnerability Details CVE-2016-2926
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Team Concert 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.4%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
Products affected by CVE-2016-2926
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.6
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.0
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1
-
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2
-
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.0
-
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1
-
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2
-
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3
-
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4
-
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5
-
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6
-
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7
-
cpe:2.3:a:ibm:rational_doors_next_generation:5.0.0
-
cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1
-
cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2
-
cpe:2.3:a:ibm:rational_doors_next_generation:6.0.0
-
cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1
-
cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2
-
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.0
-
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.1
-
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.2
-
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3
-
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4
-
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5
-
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6
-
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7
-
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0
-
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1
-
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2
-
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.0
-
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1
-
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2
-
cpe:2.3:a:ibm:rational_quality_manager:3.0.1.6
-
cpe:2.3:a:ibm:rational_quality_manager:4.0.0
-
cpe:2.3:a:ibm:rational_quality_manager:4.0.1
-
cpe:2.3:a:ibm:rational_quality_manager:4.0.2
-
cpe:2.3:a:ibm:rational_quality_manager:4.0.3
-
cpe:2.3:a:ibm:rational_quality_manager:4.0.4
-
cpe:2.3:a:ibm:rational_quality_manager:4.0.5
-
cpe:2.3:a:ibm:rational_quality_manager:4.0.6
-
cpe:2.3:a:ibm:rational_quality_manager:4.0.7
-
cpe:2.3:a:ibm:rational_quality_manager:5.0.0
-
cpe:2.3:a:ibm:rational_quality_manager:5.0.1
-
cpe:2.3:a:ibm:rational_quality_manager:5.0.2
-
cpe:2.3:a:ibm:rational_quality_manager:6.0.0
-
cpe:2.3:a:ibm:rational_quality_manager:6.0.1
-
cpe:2.3:a:ibm:rational_quality_manager:6.0.2
-
cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0
-
cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.1
-
cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.2
-
cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.3
-
cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.4
-
cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.5
-
cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.6
-
cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.7
-
cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.0
-
cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1
-
cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2
-
cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.0
-
cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.1
-
cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.2
-
cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.0
-
cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1
-
cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2
-
cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3
-
cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4
-
cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5
-
cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6
-
cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7
-
cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.0
-
cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1
-
cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2
-
cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.0
-
cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1
-
cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.2
-
cpe:2.3:a:ibm:rational_team_concert:3.0.1.6
-
cpe:2.3:a:ibm:rational_team_concert:4.0.0
-
cpe:2.3:a:ibm:rational_team_concert:4.0.1
-
cpe:2.3:a:ibm:rational_team_concert:4.0.2
-
cpe:2.3:a:ibm:rational_team_concert:4.0.3
-
cpe:2.3:a:ibm:rational_team_concert:4.0.4
-
cpe:2.3:a:ibm:rational_team_concert:4.0.5
-
cpe:2.3:a:ibm:rational_team_concert:4.0.6
-
cpe:2.3:a:ibm:rational_team_concert:4.0.7
-
cpe:2.3:a:ibm:rational_team_concert:5.0.0
-
cpe:2.3:a:ibm:rational_team_concert:5.0.1
-
cpe:2.3:a:ibm:rational_team_concert:5.0.2
-
cpe:2.3:a:ibm:rational_team_concert:6.0.0
-
cpe:2.3:a:ibm:rational_team_concert:6.0.1
-
cpe:2.3:a:ibm:rational_team_concert:6.0.2