CVE:CVE-2016-9747
CNNVD:CNNVD-201706-954
IBM Rational Collaborative Lifecycle Management和Rational Engineering Lifecycle Manager都是美国IBM公司的产品。Rational Collaborative Lifecycle Management是一套协作化生命周期管理解决方案。Rational Engineering Lifecycle Managr是一套工程生命周期管理软件。
IBM Rational Collaborative Lifecycle Management和Rational Engineering Lifecycle Manager中存在跨站脚本漏洞。远程攻击者可利用该漏洞向Web UI中注入任意的JavaScript代码。以下产品和版本受到影响：Rational Collaborative Lifecycle Management 4.0版本至6.0.2版本；Rational Engineering Lifecycle Manager 4.0.3版本至4.0.7版本，5.0版本至5.0.2版本，6.0版本至6.0.2版本。
solution:Upgrade ibm rational_engineering_lifecycle_manager to a higher version than 4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,5.0.0,5.0.1,5.0.2,6.0.0,6.0.1,6.0.2,and avoid the version 4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,5.0.0,5.0.1,5.0.2,6.0.0,6.0.1,6.0.2; Upgrade ibm rational_collaborative_lifecycle_management to a higher version than 4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,5.0.0,5.0.1,5.0.2,6.0.0,6.0.1,6.0.2,and avoid the version 4.0.0,4.0.1,4.0.2,4.0.3,4.0.4,4.0.5,4.0.6,4.0.7,5.0.0,5.0.1,5.0.2,6.0.0,6.0.1,6.0.2