Unscored severity · published Jun 30, 2011
CVE-2011-2606
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RT
Rational Team Concert · Ibm
3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2606
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2606
Vendor Advisory
http://secunia.com/advisories/44926
www.ibm.com
http://www.ibm.com/support/docview.wss?uid=swg1PM40308
www.osvdb.org
http://www.osvdb.org/73198
www.securityfocus.com
http://www.securityfocus.com/bid/48356
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/68119
More from Rational Team Concert
8.8
CVE-2021-29844
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF)
8.8
CVE-2017-1701
IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption algorithm, which could allow an…
8.1
CVE-2017-1103
IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
8.1
CVE-2016-9707
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
7.8
CVE-2015-7440
IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4;…