VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 10, 2013· Updated Jun 16, 2026

CVE-2013-5404

CVE-2013-5404

Description

Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IFRAME element.

Affected products

55
  • IBM/Rational Quality Manager21 versions
    cpe:2.3:a:ibm:rational_quality_manager:2.0:*:*:*:*:*:*:*+ 20 more
    • cpe:2.3:a:ibm:rational_quality_manager:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:2.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:2.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:2.0.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*
    • (no CPE)range: 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, 4.x before 4.0.5
  • IBM/Rational Requirements Composer18 versions
    cpe:2.3:a:ibm:rational_requirements_composer:2.0:*:*:*:*:*:*:*+ 17 more
    • cpe:2.3:a:ibm:rational_requirements_composer:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*:*:*
  • IBM/Rational Team Concert16 versions
    cpe:2.3:a:ibm:rational_team_concert:2.0:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:a:ibm:rational_team_concert:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:2.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:2.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.