Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2013-5404

EPSS 0.17% · P37
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2013-5404

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IFRAME element.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM Rational Quality Manager 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Rational Quality Manager（RQM）是美国IBM公司的一套协作的、基于Web的质量管理解决方案。该方案在软件开发的整个生命周期之内，提供了测试规划与测试评价管理方法，并能够共享信息、自动化加快项目进度以及报告制定的发布决策。 Rational Team Concert，Rational Requirements Composer及其他产品中使用的IBM RQM中存在跨站脚本漏洞，该漏洞源于当使用‘搜索文本字段的功能’时，程序没有正确过滤用户提交的输入。远程经过授权的攻击者可利
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2013-5404

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2013-5404

请登录查看更多情报信息。

Same Patch Batch · n/a · 2013-12-10 · 13 CVEs total

CVE-2013-4408Samba 缓冲区错误漏洞
CVE-2013-5447IBM Forms Viewer 基于栈的缓冲区溢出漏洞
CVE-2013-6708Cisco Cloud Portal 安全漏洞
CVE-2013-3710Novell SUSE Lifecycle Management Server 安全漏洞
CVE-2013-6237ISL Online ISL Light Desktop插件远程信息泄露漏洞
CVE-2013-6840Siemens COMOS 本地提权漏洞
CVE-2013-7042Novell SUSE Lifecycle Management Server 安全漏洞
CVE-2013-3622Supermicro Intelligent Platform Management Interface 缓冲区溢出漏洞
CVE-2013-3623Supermicro IPMI ‘close_window.cgi’缓冲区溢出漏洞
CVE-2013-6224Livezilla 跨站脚本漏洞
CVE-2012-3047Cisco Scientific Atlanta D20/D30 Cable Modem 跨站脚本漏洞
CVE-2013-7043Cisco Scientific Atlanta DPR2320R2 跨站请求伪造漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2013-5404

No comments yet

Leave a comment