CVE-2011-2606

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jun 30, 2011
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2011

CVE-2011-26074.3Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTCVE-2011-26086.4ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.CVE-2011-26094.3Opera before 11.50 does not properly restrict data: URIs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) aCVE-2011-261010.0Unspecified vulnerability in Opera before 11.50 has unknown impact and attack vectors, related to a "moderately severe issue."CVE-2011-26114.3Unspecified vulnerability in the printing functionality in Opera before 11.50 allows user-assisted remote attackers to cause a denial of serCVE-2011-26125.0Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via unknown contentCVE-2011-26135.0The Array.prototype.join method in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a non-arrCVE-2011-26145.0The SVG implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving CVE-2011-26155.0Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application hang) via unknown content CVE-2011-26165.0Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (memory consumption) via unknown contenCVE-2011-26175.0Unspecified vulnerability in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors relatedCVE-2011-26185.0Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via web script that moves a (1) AUDIO element or
CVE-2011-2606: Medium severity, CVSS 4.3 | Vulnix