CVE-2007-4592
Last modified
CVE-2007-4592 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in the web interface for IBM Rational ClearQuest before 2003.06.16 Patch 2008A, 7.0.0.2_iFix01, and 7.0.1.1_iFix01 allow remote attackers to inject arbitrary web script or HTML via the (1) contextid, (2) username, (3) userNameVal, and (4) schema parameters to the login component.. EPSS estimates a 4.50% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in the web interface for IBM Rational ClearQuest before 2003.06.16 Patch 2008A, 7.0.0.2_iFix01, and 7.0.1.1_iFix01 allow remote attackers to inject arbitrary web script or HTML via the (1) contextid, (2) username, (3) userNameVal, and (4) schema parameters to the login component.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Rational Clearquest | <= 2003-06-16 |
| Ibm | Rational Clearquest | 7.0.1 |
| Ibm | Rational Clearquest | 7.0.1.1 |
| Ibm | Rational Clearquest | 7.0.2 |
References
- http://secunia.com/advisories/29467Vendor Advisory
- http://www.vupen.com/english/advisories/2008/0952/referencesVendor Advisory
- http://secunia.com/advisories/29467Vendor Advisory
- http://www.vupen.com/english/advisories/2008/0952/referencesVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-4592?
How severe is CVE-2007-4592?
How do I fix CVE-2007-4592?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-4586Multiple buffer overflows in php_iisfunc.dll in the iisfunc …
- CVE-2007-4587Cross-site scripting (XSS) vulnerability in Easy Software Ca…
- CVE-2007-4588Multiple cross-site scripting (XSS) vulnerabilities in Inter…
- CVE-2007-4589Multiple cross-site scripting (XSS) vulnerabilities in Inter…
- CVE-2007-4590The get_system_info command in Ignite-UX C.7.0 through C.7.3…
- CVE-2007-4591vstor-ws60.sys in VMWare Workstation 6.0 allows local users …
- CVE-2007-4593Unspecified vulnerability in vstor2-ws60.sys in VMWare Works…
- CVE-2007-4594Entrust Entelligence Security Provider (ESP) 8 does not prop…
- CVE-2007-4595Cross-site scripting (XSS) vulnerability in Mayaa before 1.1…
- CVE-2007-4596The perl extension in PHP does not follow safe_mode restrict…
- CVE-2007-4597SQL injection vulnerability in index.php in TurnkeyWebTools …
- CVE-2007-4598IBM SurePOS 500 has (1) a default password of "12345" for th…
Are you affected by CVE-2007-4592?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST