CVE-2016-2986

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 6.0.0 through 6.0.1 before iFix6 IBM Rational Quality Manager versions 6.0.0 through 6.0.1 before iFix6 IBM Rational Team Concert versions 6.0.0 through 6.0.1 before iFix6 IBM Rational DOORS Next Generation versions 6.0.0 through 6.0.1 before iFix6 IBM Rational Engineering Lifecycle Manager versions 6.0.0 through 6.0.1 before iFix6 IBM Rational Rhapsody Design Manager versions 6.0.0 through 6.0.1 before iFix6

Description A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For IBM Rational Collaborative Lifecycle Management versions 6.0.0 through 6.0.1 before iFix6, update to version 6.0.1 iFix6. For IBM Rational Quality Manager versions 6.0.0 through 6.0.1 before iFix6, update to version 6.0.1 iFix6. For IBM Rational Team Concert versions 6.0.0 through 6.0.1 before iFix6, update to version 6.0.1 iFix6. For IBM Rational DOORS Next Generation versions 6.0.0 through 6.0.1 before iFix6, update to version 6.0.1 iFix6. For IBM Rational Engineering Lifecycle Manager versions 6.0.0 through 6.0.1 before iFix6, update to version 6.0.1 iFix6. For IBM Rational Rhapsody Design Manager versions 6.0.0 through 6.0.1 before iFix6, update to version 6.0.1 iFix6.