[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2016-6037":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":27,"cwes":28,"cpes":30,"technologies":60,"references":63,"score":65,"epss_score":66,"epss_percentile":67,"is_kev":68,"cisa_kev_date_added":69,"cisa_kev_due_date":69,"cisa_ssvc":70,"attack_mappings":76,"exploits":83},189437,"CVE-2016-6037","EUVD-2016-6971","IBM Rational Team Concert (RTC) is vulnerable to HTML injection. A remote attacker with project administrator privileges could send a project that contains malicious HTML code, which when the project is viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 116918.","2017-05-10T14:29:00Z",{"cvss_v2.0":10,"cvss_v3.0":19},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":18,"confidentialityImpact":18},"2.0",3.5,"NETWORK","AV:N\u002FAC:M\u002FAu:S\u002FC:N\u002FI:P\u002FA:N","SINGLE","PARTIAL","MEDIUM","NONE",{"scope":20,"version":21,"baseScore":22,"attackVector":13,"baseSeverity":17,"vectorString":23,"integrityImpact":24,"userInteraction":25,"attackComplexity":24,"availabilityImpact":18,"privilegesRequired":26,"confidentialityImpact":24},"CHANGED","3.0",4.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","LOW","REQUIRED","HIGH",true,[29],"CWE-79",[31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59],"cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*",[61,62],"Ibm Rational Team Concert","Ibm Rational Quality Manager",[64],"http:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg22002429",0.44,0.00599,0.48069,false,null,{"timestamp":69,"automatable":71,"tech_impact":72,"exploitation":73,"cisa_decision":74,"cisa_remediation_timeline":75},"no","partial","none",{},"FSU",[77],{"name":78,"source":79,"tactics":80,"technique_id":82},"Exploit Public-Facing Application","attack_vector",[81],"initial-access","T1190",[]]