CVE-2015-7453
Estado: ModificadaMedia (6.1)—
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Quality Manager (RQM) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Team Concert (RTC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Requirements Composer (RRC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1 and 4.0.x before 4.0.7 iFix10; Rational DOORS Next Generation (RDNG) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Engineering Lifecycle Manager (RELM) 4.0.3, 4.0.4, 4.0.5, 4.0.6, and 4.0.7 before iFix10, 5.0.x before 5.0.2 iFix1, and 6.0.x before 6.0.2; Rational Rhapsody Design Manager (Rhapsody DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; and Rational Software Architect Design Manager (RSA DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Leer descripción completaMostrar menos
IBM X-Force ID: 108296.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Puntuación base: 6.1
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.85%
- Percentil entre todas las CVEs puntuadas: 57
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (8)
IBM — Rational Collaborative Lifecycle ManagementIBM — Rational Doors Next GenerationIBM — Rational Engineering Lifecycle ManagerIBM — Rational Quality ManagerIBM — Rational Requirements ComposerIBM — Rational Rhapsody Design ManagerIBM — Rational Software Architect Design ManagerIBM — Rational Team Concert
CWE
- CWE-79
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2015-7453",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "CHANGED",
"version": "3.0",
"baseScore": 6.1,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 2.7,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2018-03-15T22:29:00.307",
"references": [
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21982747",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/108296",
"tags": [
"VDB Entry",
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21982747",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/108296",
"tags": [
"VDB Entry",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-79"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Quality Manager (RQM) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Team Concert (RTC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Requirements Composer (RRC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1 and 4.0.x before 4.0.7 iFix10; Rational DOORS Next Generation (RDNG) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Engineering Lifecycle Manager (RELM) 4.0.3, 4.0.4, 4.0.5, 4.0.6, and 4.0.7 before iFix10, 5.0.x before 5.0.2 iFix1, and 6.0.x before 6.0.2; Rational Rhapsody Design Manager (Rhapsody DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; and Rational Software Architect Design Manager (RSA DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108296."
},
{
"lang": "es",
"value": "Vulnerabilidad Cross-Site Scripting (XSS) en IBM Rational Collaborative Lifecycle Management (CLM) en versiones 3.0.1 anteriores a 3.0.1.6 iFix7 Interim Fix 1, 4.0.x anteriores a 4.0.7 iFix10, 5.0.x anteriores a 5.0.2 iFix15 y 6.0.x anteriores a 6.0.1 iFix4; Rational Quality Manager (RQM) 3.0.x anteriores a 3.0.1.6 iFix7 Interim Fix 1, 4.0.x anteriores a 4.0.7 iFix10, 5.0.x anteriores a 5.0.2 iFix15 y 6.0.x anteriores a 6.0.1 iFix4; Rational Team Concert (RTC) 3.0.x anteriores a 3.0.1.6 iFix7 Interim Fix 1, 4.0.x anteriores a 4.0.7 iFix10, 5.0.x anteriores a 5.0.2 iFix15 y 6.0.x anteriores a 6.0.1 iFix4; Rational Requirements Composer (RRC) 3.0.x anteriores a 3.0.1.6 iFix7 Interim Fix 1 and 4.0.x anteriores a 4.0.7 iFix10; Rational DOORS Next Generation (RDNG) 4.0.x anteriores a 4.0.7 iFix10, 5.0.x anteriores a 5.0.2 iFix15 y 6.0.x anteriores a 6.0.1 iFix4; Rational Engineering Lifecycle Manager (RELM) 4.0.3, 4.0.4, 4.0.5, 4.0.6 y 4.0.7 anteriores a iFix10, 5.0.x anteriores a 5.0.2 iFix1 y 6.0.x anteriores a 6.0.2; Rational Rhapsody Design Manager (Rhapsody DM) 4.0.x anteriores a 4.0.7 iFix10, 5.0.x anteriores a 5.0.2 iFix15 y 6.0.x anteriores a 6.0.1 iFix4; and Rational Software Architect Design Manager (RSA DM) 4.0.x anteriores a 4.0.7 iFix10, 5.0.x anteriores a 5.0.2 iFix15 y 6.0.x anteriores a 6.0.1 iFix4 permite que los atacantes remotos inyecten scripts web o HTML arbitrarios mediante vectores sin especificar. IBM X-Force ID: 108296."
}
],
"lastModified": "2026-06-17T00:32:34.073",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5103D1D-DC6C-40CE-8092-5102E8F10A6E",
"versionEndIncluding": "6.0.1",
"versionStartIncluding": "3.0.1"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEF02561-E60D-4577-B4AB-D2085B3599F1",
"versionEndIncluding": "3.0.1.6",
"versionStartIncluding": "3.0"
},
{
"criteria": "cpe:2.3:a:ibm:rational_quality_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF1C422A-3D5F-48B1-BC6E-954D1AFA34F9",
"versionEndIncluding": "4.0.7",
"versionStartIncluding": "4.0"
},
{
"criteria": "cpe:2.3:a:ibm:rational_quality_manager:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D094EE5E-DF84-4922-A612-35CD4DC4D875"
},
{
"criteria": "cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D1186E8-2639-476F-802E-580D98F2E255"
},
{
"criteria": "cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC7E998F-416E-4E1F-BF85-606224B468CF"
},
{
"criteria": "cpe:2.3:a:ibm:rational_quality_manager:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7569ED1E-D61E-4F97-825B-2B20A1C03319"
},
{
"criteria": "cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E52984F5-4372-4D13-95B1-51F4DB19D425"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "748629D9-94EA-4A8C-84D9-16AD00442C05",
"versionEndIncluding": "3.0.6",
"versionStartIncluding": "3.0"
},
{
"criteria": "cpe:2.3:a:ibm:rational_team_concert:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51CDEB94-002E-479A-A055-F3FD38D3AE41",
"versionEndIncluding": "4.0.7",
"versionStartIncluding": "4.0"
},
{
"criteria": "cpe:2.3:a:ibm:rational_team_concert:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EA5622F-81FF-4C0C-8A3D-9ACFE30B0ACA"
},
{
"criteria": "cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8BEC305-F98D-45F4-B149-1188744DE408"
},
{
"criteria": "cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E837B6AB-B8FF-413E-8DE9-EE61F6113ED1"
},
{
"criteria": "cpe:2.3:a:ibm:rational_team_concert:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB5C385D-6C5B-4D5E-8628-6D80E8E54403"
},
{
"criteria": "cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF686B93-3DE2-4A4D-BA6F-10CA9AFCFA73"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:rational_requirements_composer:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23C054AA-DA70-431C-A410-01671854C0D0",
"versionEndIncluding": "3.0.1.6",
"versionStartIncluding": "3.0"
},
{
"criteria": "cpe:2.3:a:ibm:rational_requirements_composer:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CAE640E-7342-44B0-8C02-97EE71ECAD91",
"versionEndIncluding": "4.0.7",
"versionStartIncluding": "4.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B3D3092-A570-45DE-9CD4-72E01787D189",
"versionEndIncluding": "4.0.7",
"versionStartIncluding": "4.0"
},
{
"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2431038-D838-4AB0-B614-EDC1D4D203E2"
},
{
"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A0BC49A-4D59-47AE-B2D2-13B6719B0932"
},
{
"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3AE1241-9998-4F5D-862A-52CE40DB24C8"
},
{
"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C3F32526-C148-4FCE-B32B-88A8F2BB3A5B"
},
{
"criteria": "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "749C6DAF-EF92-40DD-9CE8-535D1C5BB745"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FA536CF-BF5F-42F1-8F7A-7850E4AC9319",
"versionEndIncluding": "4.0.7",
"versionStartIncluding": "4.0.3"
},
{
"criteria": "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE1738F8-EECC-46C9-AE0C-46E8E4B2AC5E"
},
{
"criteria": "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F01BD6B-30EA-4AD6-A2CA-04638FF59DF4"
},
{
"criteria": "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E8B81FD-2288-4DD3-9AAC-76016FFA2D30"
},
{
"criteria": "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61CE7D3E-BF02-44DA-ADAE-5CB0E22492AB"
},
{
"criteria": "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5ECD177-5310-44DA-A364-1077898C3A50"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:rational_rhapsody_design_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19611ED3-74F3-4124-A334-09A66A9274A9",
"versionEndIncluding": "4.0.7",
"versionStartIncluding": "4.0"
},
{
"criteria": "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B12D7433-30F0-427F-BF82-0AAD492CE35D"
},
{
"criteria": "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6E654FB-BD17-4308-9CD0-163D8DA0BD6B"
},
{
"criteria": "cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64D14BEF-D1F0-4C27-87F0-8BCAD8A3E369"
},
{
"criteria": "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0B9D0C8-2EB2-4209-8495-1B3B823D9A41"
},
{
"criteria": "cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94EF2E53-3618-4610-AC36-602584DB26EF"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:rational_software_architect_design_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D29F101-F08E-42A1-B7F2-1BD982F81221",
"versionEndIncluding": "4.0.7",
"versionStartIncluding": "4.0"
},
{
"criteria": "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2654BDE-3134-4653-B472-995B02E9B841"
},
{
"criteria": "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C36DDB50-CF31-4B3C-AE49-99A3AFBC0791"
},
{
"criteria": "cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DFDE569-8BE3-4CFD-8228-FF785B004068"
},
{
"criteria": "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9800CBFC-3169-42CA-BB36-22C34F222FD6"
},
{
"criteria": "cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D3E975D-3D7B-4DE3-B961-BA6D38329563"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}