VULNERABILITY INTELLIGENCE
CVE-2008-3550
CVSS score5 MEDIUM
EPSS probability1.20%
CISA KEVNot currently listed
Published2008-08-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information (page source code) via a combination of ?script? and ?/script? sequences in the id field, possibly related to a cross-site scripting (XSS) vulnerability.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor