VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Sep 12, 2016· Updated Jun 17, 2026

CVE-2016-0331

CVE-2016-0331

Description

Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2 iFix2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • IBM/Rational Collaborative Lifecycle Management3 versions
    cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*
    • (no CPE)range: >=6.0.1, <=6.0.2 before iFix2
  • IBM/Rational Team Concert3 versions
    cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*
    • (no CPE)range: >=6.0.1, <=6.0.2 before iFix2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.