NetSight
medium6.1

CVE-2015-7439

Cross-site scripting (XSS) vulnerability in InfoSphere Data Architect (IDA), as distributed in IBM Rational Software Architect 8.5 through 9.5, Rational Softwa…

Impact

Cross-site scripting (XSS) vulnerability in InfoSphere Data Architect (IDA), as distributed in IBM Rational Software Architect 8.5 through 9.5, Rational Software Architect for WebSphere Software (RSA4WS) 8.5 through 9.5, and Rational Software Architect RealTime (RSART) 8.5 through 9.5, allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Affected products

VendorProductAffected versions
IbmRational Software Architect Realtime
Versions 8.5.0, 8.5.1, 8.5.1.0, 8.5.5, 8.5.5.1, 8.5.5.2
IbmRational Software Architect For Websphere Software
Versions 8.5.0, 8.5.1, 8.5.1.0, 8.5.5, 8.5.5.2, 8.5.5.3
IbmRational Software Architect For Websphere Software\'
Version 8.5.5.1
IbmRational Software Architect
Versions 8.5.0, 8.5.1, 8.5.1.0, 8.5.5, 8.5.5.1, 8.5.5.2

Weakness classification

References