VIR Vulnerability Intelligence Relay

CVE-2012-2205

low
Published 2012-08-17 · Modified 2026-04-29
CVSS v3
—
CVSS v2
3.5
VIR risk
3.5

Description

Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a workspace query.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: psirt@us.ibm.com — http://www.ibm.com/support/docview.wss?uid=swg21605838

vendor Authored 2026-05-27

Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg1PM61670

Application impact
VendorProductVersionsFixed
ibmrational_clearquest7.1.1.1
ibmrational_clearquest7.1.1.2
ibmrational_clearquest7.1.1.3
ibmrational_clearquest7.1.1.4
ibmrational_clearquest7.1.1.5
ibmrational_clearquest7.1.1.6
ibmrational_clearquest7.1.1.7
ibmrational_clearquest7.1.1.8
ibmrational_clearquest7.1.2
ibmrational_clearquest7.1.2.1
ibmrational_clearquest7.1.2.2
ibmrational_clearquest7.1.2.3
ibmrational_clearquest7.1.2.4
ibmrational_clearquest7.1.2.5
ibmrational_clearquest7.1.2.6
ibmrational_clearquest8.0.0
ibmrational_clearquest8.0.0.1
ibmrational_clearquest8.0.0.2

References

CWEs

CWE-79

Verify integrity in audit chain (admin only). AS-IS.