Lucene search

K
nvd[email protected]NVD:CVE-2008-5324
HistoryDec 05, 2008 - 12:30 a.m.

CVE-2008-5324

2008-12-0500:30:00
CWE-79
web.nvd.nist.gov
5

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

45.5%

Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 2007 before 2007D and 2008 before 2008B allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd
Node
ibmrational_clearquestMatch2007
OR
ibmrational_clearquestMatch2008
VendorProductVersionCPE
ibmrational_clearquest2007cpe:2.3:a:ibm:rational_clearquest:2007:*:*:*:*:*:*:*
ibmrational_clearquest2008cpe:2.3:a:ibm:rational_clearquest:2008:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

45.5%

Related for NVD:CVE-2008-5324