IBM Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting attack (CVE-2017-1127, CVE-2017-1128)

Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting attack.

CVE(s): CVE-2017-1127, CVE-2017-1128

Affected product(s) and affected version(s):

Rational DOORS Next Generation 6.0 – 6.0.2 (6.0.3 is not affected)
Rational DOORS Next Generation 5.0 – 5.0.2
Rational Requirements Composer 4.0 – 4.0.7

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2k9SFiN
X-Force Database: http://ift.tt/2k3HkOV
X-Force Database: http://ift.tt/2k9HUgw

from IBM Product Security Incident Response Team http://ift.tt/2k3Pnv1