CVE-2017-1242

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124524.

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
IBM	Rational Quality Manager	6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5; 5.0.x

References

http://www.ibm.com/support/docview.wss?uid=ibm10716201Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/124524VDB Entry, Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=ibm10716201Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/124524VDB Entry, Vendor Advisory

Timeline

Published: Jul 6, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-124208.8Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allows remote authentic CVE-2017-124218.8NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the storage controller via CVE-2017-124226.5NetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10.4.0.2 allow remote authenticated users to d CVE-2017-124237.7NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines (SVMs) vi CVE-2017-124249.8In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed in CVE-2017-124257.5An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2. A wrong if statement CVE-2017-124268.8GitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1.x before 9.1.10, 9.2.x before 9.2.10, 9.3.CVE-2017-124276.5The ProcessMSLScript function in coders/msl.c in ImageMagick before 6.9.9-5 and 7.x before 7.0.6-5 allows remote attackers to cause a denial CVE-2017-124287.5In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause CVE-2017-124297.5In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers t CVE-2017-124307.5In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to CVE-2017-124316.5In ImageMagick 7.0.6-1, a use-after-free vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cau