CVE-2018-1494 in IBM DOORS Next Generation
Summary
IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 141097.
Responsible
IBM Corporation
Reservation
12/13/2017
Disclosure
07/06/2018
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 120485 | IBM DOORS Next Generation Web UI cross site scripting | 79 | Not defined | Not defined | CVE-2018-1494 |