Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in the ReqWeb Help feature (aka the Web Client Help system) in IBM Rational RequisitePro 7.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the operation parameter to ReqWebHelp/advanced/workingSet.jsp, or the (2) searchWord, (3) maxHits, (4) scopedSearch, or (5) scope parameter to ReqWebHelp/basic/searchView.jsp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Rational RequisitePro ReqWebHelp组件跨站脚本漏洞
Vulnerability Description
IBM Rational RequisitePro是一个功能强大而又易于使用的需求管理产品。 Rational RequisitePro所使用的ReqWebHelp组件没有对提交给/ReqWebHelp/basic/searchView.jsp页面的searchWord、maxHits、scopedSearch和scope参数，以及提交给/ReqWebHelp/advanced/workingSet.jsp页面的operation参数进行正确地验证就直接返回给用户，远程攻击者可以通过恶意的HTTP请求在用
CVSS Information
N/A
Vulnerability Type
N/A