CVE-2015-7453

Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Quality Manager (RQM) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Team Concert (RTC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Requirements Composer (RRC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1 and 4.0.x before 4.0.7 iFix10; Rational DOORS Next Generation (RDNG) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Engineering Lifecycle Manager (RELM) 4.0.3, 4.0.4, 4.0.5, 4.0.6, and 4.0.7 before iFix10, 5.0.x before 5.0.2 iFix1, and 6.0.x before 6.0.2; Rational Rhapsody Design Manager (Rhapsody DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; and Rational Software Architect Design Manager (RSA DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108296.

• CWE-79

• http://www-01.ibm.com/support/docview.wss?uid=swg21982747Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/108296VDB Entry, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21982747Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/108296VDB Entry, Vendor Advisory

Published

Mar 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7447IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 throu…
• CVE-2015-7448SQL injection vulnerability in IBM Maximo Asset Management 7…
• CVE-2015-7449IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x …
• CVE-2015-7450Serialized-object interfaces in certain IBM analytics, busin…9.8
• CVE-2015-7451Cross-site scripting (XSS) vulnerability in IBM Maximo Asset…
• CVE-2015-7452IBM Maximo Asset Management 7.5 before 7.5.0.9 FP9 and 7.6 b…
• CVE-2015-7454Business Space in IBM WebSphere Process Server 6.1.2.0 throu…
• CVE-2015-7455IBM WebSphere Portal 7.x through 7.0.0.2 CF29, 8.0.x before …
• CVE-2015-7456IBM Spectrum Scale 4.1.1 before 4.1.1.4, and 4.2.0.0, allows…
• CVE-2015-7457Cross-site scripting (XSS) vulnerability in IBM WebSphere Po…
• CVE-2015-7458Cross-site scripting (XSS) vulnerability in IBM Connections …
• CVE-2015-7459Cross-site scripting (XSS) vulnerability in IBM Connections …