CVE-2015-7486

Cross-site scripting (XSS) vulnerability in IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108633.

• CWE-79

• http://www-01.ibm.com/support/docview.wss?uid=swg21983720Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/108633VDB Entry, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21983720Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/108633VDB Entry, Vendor Advisory

Published

Jan 16, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7471Cross-site scripting (XSS) vulnerability in IBM Rational Col…
• CVE-2015-7472IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 throu…
• CVE-2015-7473runmqsc in IBM WebSphere MQ 8.x before 8.0.0.5 allows local …
• CVE-2015-7474Cross-site scripting (XSS) vulnerability in Jazz Foundation …
• CVE-2015-7484IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.…
• CVE-2015-7485Cross-site scripting (XSS) vulnerability in IBM Rational Eng…
• CVE-2015-7487IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 befo…
• CVE-2015-7488IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4…
• CVE-2015-7489IBM SPSS Statistics 22.0.0.2 before IF10 and 23.0.0.2 before…
• CVE-2015-7490IBM InfoSphere Information Server 8.5 through FP3, 8.7 throu…
• CVE-2015-7491Cross-site scripting (XSS) vulnerability in IBM WebSphere Po…
• CVE-2015-7492Cross-site scripting (XSS) vulnerability in Reference Data M…