Description
IBM Rational Team Concert 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138445.
Remediation
References
Related Vulnerabilities
WordPress Plugin Booking Calendar Cross-Site Request Forgery (4.1.5)
WordPress Plugin Canalplan Cross-Site Scripting (3.22)
Skipper : Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2026-65838)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2025-61639)
SharePoint Deserialization of Untrusted Data Vulnerability (CVE-2025-30384)