CVE-2017-1563

Summary

IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131763.

Affected Software

VendorProductVersion RangeStatus
IBMRational DOORS9.5affected
IBMRational DOORS9.5.0.1affected
IBMRational DOORS9.5.1affected
IBMRational DOORS9.5.1.1affected
IBMRational DOORS9.5.1.2affected
IBMRational DOORS9.5.2affected
IBMRational DOORS9.5.2.1affected
IBMRational DOORS9.6affected
IBMRational DOORS9.5.0.2affected
IBMRational DOORS9.5.0.3affected
IBMRational DOORS9.5.1.3affected
IBMRational DOORS9.5.1.4affected
IBMRational DOORS9.5.2.2affected
IBMRational DOORS9.5.2.3affected
IBMRational DOORS9.6.0.1affected
IBMRational DOORS9.6.0.2affected
IBMRational DOORS9.6.1affected
IBMRational DOORS9.6.1.1affected
IBMRational DOORS9.5.0.4affected
IBMRational DOORS9.5.1.5affected
IBMRational DOORS9.5.2.4affected
IBMRational DOORS9.6.0.3affected
IBMRational DOORS9.6.1.2affected
IBMRational DOORS9.6.1.3affected
IBMRational DOORS9.6.1.4affected
IBMRational DOORS9.5.0.5affected
IBMRational DOORS9.5.1.6affected
IBMRational DOORS9.5.2.5affected
IBMRational DOORS9.6.0.4affected
IBMRational DOORS9.5.0.6affected
IBMRational DOORS9.5.1.7affected
IBMRational DOORS9.5.2.6affected
IBMRational DOORS9.6.0.5affected
IBMRational DOORS9.6.1.5affected
IBMRational DOORS9.6.1.6affected
IBMRational DOORS9.6.1.7affected
IBMRational DOORS9.5.0.7affected
IBMRational DOORS9.5.1.8affected
IBMRational DOORS9.5.2.7affected
IBMRational DOORS9.6.0.6affected
IBMRational DOORS9.6.1.8affected
IBMRational DOORS9.6.1.9affected

Weaknesses

  • Cross-Site Scripting

ADP Enrichment

CVE Program Container

Additional References

References