Medium severity5.4NVD Advisory· Published Nov 25, 2016· Updated May 6, 2026

CVE-2016-2926

Description

Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Team Concert 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Affected products

101

IBM/Rational Team Concert15 versions
cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:3.0.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*
IBM/Rational Rhapsody Design Manager14 versions
cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.2:*:*:*:*:*:*:*
IBM/Rational Engineering Lifecycle Manager14 versions
cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.0:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*
IBM/Rational Quality Manager15 versions
cpe:2.3:a:ibm:rational_quality_manager:4.0.0:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:ibm:rational_quality_manager:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_quality_manager:3.0.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*
IBM/Rational Collaborative Lifecycle Management15 versions
cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.6:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*
IBM/Rational Software Architect Design Manager14 versions
cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.0:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.2:*:*:*:*:*:*:*
IBM/Rational Doors Next Generation14 versions
cpe:2.3:a:ibm:rational_doors_next_generation:4.0.0:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:ibm:rational_doors_next_generation:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_doors_next_generation:5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_doors_next_generation:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www-01.ibm.com/support/docview.wssnvdPatchVendor Advisory
www.securityfocus.com/bid/94146nvd
www.securitytracker.com/id/1037276nvd
www.securitytracker.com/id/1037277nvd
www.securitytracker.com/id/1037278nvd
www.securitytracker.com/id/1037279nvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000