IBM RTC Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2017-1753
Multiple IBM Rational products are vulnerable to HTML injection. A remote attacker could inject malicious HTML code which when viewed would be executed in the victim39s Web browser within the security context of the hosting site. IBM X-Force ID: 135655.