Vulnerability Database

289,871

Total vulnerabilities in the database

CVE-2012-2169

Cross-site scripting (XSS) vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote authenticated users to inject arbitrary web script or HTML via the File Description field.

  • Published: Aug 17, 2012
  • Updated: Apr 13, 2023
  • CVE: CVE-2012-2169
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
ibm / rational_clearquest 7.1.1.6 7.1.1.6.x
ibm / rational_clearquest 7.1.2.2 7.1.2.2.x
ibm / rational_clearquest 7.1.2.1 7.1.2.1.x
ibm / rational_clearquest 7.1.2.6 7.1.2.6.x
ibm / rational_clearquest 7.1.1.5 7.1.1.5.x
ibm / rational_clearquest 7.1.2 7.1.2.x
ibm / rational_clearquest 7.1.2.3 7.1.2.3.x
ibm / rational_clearquest 7.1.1.1 7.1.1.1.x
ibm / rational_clearquest 7.1.1.4 7.1.1.4.x
ibm / rational_clearquest 7.1.1.3 7.1.1.3.x
ibm / rational_clearquest 7.1.1.2 7.1.1.2.x
ibm / rational_clearquest 7.1.2.5 7.1.2.5.x
ibm / rational_clearquest 7.1.1.8 7.1.1.8.x
ibm / rational_clearquest 7.1.2.4 7.1.2.4.x
ibm / rational_clearquest 7.1.1.7 7.1.1.7.x