dbcve.org
Vulnerability index

Browse CVEs

1,094 matching
Cards Compact
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Rational Doors Next Generation MEDIUM 5.4
CVE-2017-1461

IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaS…

Fix: after 6.0.4
Fix from $1,600 2017-11-27
Rational Doors Next Generation MEDIUM 5.4
CVE-2017-1560

IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaS…

Fix: after 6.0.4
Fix from $1,600 2017-11-27
Rational Doors Next Generation MEDIUM 5.4
CVE-2017-1593

IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaS…

Fix: after 6.0.4
Fix from $1,600 2017-11-27
Rational Doors Next Generation MEDIUM 5.4
CVE-2017-1607

IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in …

Patch available
Fix from $1,600 2017-11-27
Rational Doors Next Generation MEDIUM 5.4
CVE-2017-1650

IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in …

Patch available
Fix from $1,600 2017-11-27
Rational Doors Next Generation MEDIUM 5.4
CVE-2017-1678

IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaS…

Fix: after 6.0.4
Fix from $1,600 2017-11-27
Rational Doors Next Generation MEDIUM 5.4
CVE-2017-1688

IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in …

Patch available
Fix from $1,600 2017-11-27
Rational Doors Next Generation MEDIUM 5.4
CVE-2017-1689

IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in …

Patch available
Fix from $1,600 2017-11-27
Openpages Grc Platform MEDIUM 5.4
CVE-2016-3048

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod…

Patch available
Fix from $1,600 2017-11-01
Openpages Grc Platform MEDIUM 5.4
CVE-2017-1147

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod…

Patch available
Fix from $1,600 2017-11-01
Openpages Grc Platform MEDIUM 5.4
CVE-2017-1290

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod…

Patch available
Fix from $1,600 2017-11-01
Infosphere Biginsights MEDIUM 5.4
CVE-2017-1552

IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to link injection. By persuading a victim to click on a specially-crafted URL link, a remote…

Patch available
Fix from $1,600 2017-11-01
Infosphere Biginsights MEDIUM 5.4
CVE-2017-1553

IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code …

Patch available
Fix from $1,600 2017-11-01
Infosphere Biginsights MEDIUM 5.4
CVE-2017-1554

IBM Infosphere BigInsights 4.2.0 and 4.2.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit…

Patch available
Fix from $1,600 2017-11-01
Bigfix Platform MEDIUM 6.1
CVE-2017-1521

IBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix Platform 9.2 and 9.5) is vulnerable to cross-site scrip…

Patch available
Fix from $1,600 2017-10-26
Rational Collaborative Lifecycle Management MEDIUM 5.4
CVE-2017-1164

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alte…

Mitigation only
Fix from $1,600 2017-10-25
Rational Collaborative Lifecycle Management MEDIUM 5.4
CVE-2017-1169

IBM DOORS next Generation (DNG/RRC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the …

Mitigation only
Fix from $1,600 2017-10-25
Rational Collaborative Lifecycle Management MEDIUM 5.4
CVE-2017-1363

IBM Team Concert (RTC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus a…

Mitigation only
Fix from $1,600 2017-10-25
Openpages Grc Platform MEDIUM 5.4
CVE-2016-3049

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, …

Mitigation only
Fix from $1,600 2017-10-24
Daeja Viewone MEDIUM 5.4
CVE-2017-1209

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

Mitigation only
Fix from $1,600 2017-10-24
Websphere Application Server MEDIUM 6.1
CVE-2017-1503

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulner…

Mitigation only
Fix from $1,600 2017-10-10
Content Navigator MEDIUM 5.4
CVE-2017-1522

IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc…

Mitigation only
Fix from $1,600 2017-10-05
Rational Engineering Lifecycle Manager MEDIUM 5.4
CVE-2017-1324

IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th…

Mitigation only
Fix from $1,600 2017-10-03
Rational Engineering Lifecycle Manager MEDIUM 5.4
CVE-2017-1334

IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th…

Mitigation only
Fix from $1,600 2017-10-03
Rational Engineering Lifecycle Manager MEDIUM 5.4
CVE-2017-1335

IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th…

Mitigation only
Fix from $1,600 2017-10-03
Insights Foundation For Energy MEDIUM 5.4
CVE-2017-1345

IBM Insights Foundation for Energy 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t…

Mitigation only
Fix from $1,600 2017-10-03
Rational Engineering Lifecycle Manager MEDIUM 5.4
CVE-2017-1359

IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th…

Mitigation only
Fix from $1,600 2017-10-03
Rational Engineering Lifecycle Manager MEDIUM 5.4
CVE-2017-1364

IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th…

Mitigation only
Fix from $1,600 2017-10-03
Rational Engineering Lifecycle Manager MEDIUM 5.4
CVE-2017-1369

IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th…

Mitigation only
Fix from $1,600 2017-10-03
Rational Engineering Lifecycle Manager MEDIUM 5.4
CVE-2017-1429

IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th…

Mitigation only
Fix from $1,600 2017-10-03