IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single sign on is used with. Rated low severity (CVSS 3.7). No vendor patch available.
IBM
Information Disclosure
Rational Requirements Composer
Rational Doors Next Generation
NVD
CVSS 2.0
3.7
EPSS
0.2%
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5.0 and WebSphere Lombardi Edition (WLE) 7.2.x. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.
IBM
XSS
Business Process Manager
Websphere
NVD
CVSS 2.0
3.5
EPSS
0.2%