CVE-2017-1276: IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting.

Security readout for executives and security teams

CVE-2017-1276 is a cross-site scripting issue in IBM Rational DOORS Next Generation, also known as DNG/RRC. A user could place JavaScript into the web interface, changing what other trusted users see or do and potentially exposing credentials during a logged-in session. Exposure is most likely in organizations still running older IBM DNG/RRC versions listed as affected, especially where many internal users collaborate through the Web UI. Internet-facing access would raise urgency, but the provided sources do not state exposure patterns. Treat this as a moderate-priority remediation item for legacy IBM engineering systems. It can affect credential trust and user workflows, but the available evidence does not show active exploitation or severity scoring. Mitigation focus: Inventory IBM DNG/RRC versions and identify affected 4.0, 5.0, and 6.0 deployments.; Review IBM advisory swg22002809 for vendor-approved fixes or mitigations.; Limit Web UI access to trusted users until remediation is confirmed..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.