IBM » Rational Collaborative Lifecycle Management » 4.0 : Security Vulnerabilities, CVEs,
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136006.
Max CVSS
5.4
EPSS Score
0.06%
Published
2018-03-23
Updated
2019-10-09
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133379.
Max CVSS
5.4
EPSS Score
0.06%
Published
2018-03-23
Updated
2019-10-09
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133127.
Max CVSS
5.4
EPSS Score
0.06%
Published
2018-03-23
Updated
2019-10-09
IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625.
Max CVSS
4.3
EPSS Score
0.06%
Published
2018-03-23
Updated
2019-10-09
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852.
Max CVSS
4.3
EPSS Score
0.07%
Published
2017-11-27
Updated
2017-12-14
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970.
Max CVSS
4.3
EPSS Score
0.06%
Published
2018-03-23
Updated
2019-10-09
IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system. IBM X-Force ID: 129619.
Max CVSS
4.3
EPSS Score
0.05%
Published
2017-12-11
Updated
2017-12-26
IBM Team Concert (RTC including IBM Rational Collaborative Lifecycle Management 4.0, 5.0., and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 126858.
Max CVSS
5.4
EPSS Score
0.05%
Published
2017-12-27
Updated
2018-01-17
IBM Team Concert (RTC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126856.
Max CVSS
5.4
EPSS Score
0.06%
Published
2017-10-25
Updated
2017-11-13
IBM RSA DM contains unspecified vulnerability in CLM Applications with potential for information leakage. IBM X-Force ID: 125157.
Max CVSS
4.3
EPSS Score
0.07%
Published
2017-10-25
Updated
2017-11-13
An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. IBM X-Force ID: 124631.
Max CVSS
4.3
EPSS Score
0.05%
Published
2017-11-27
Updated
2017-12-14
An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523.
Max CVSS
4.3
EPSS Score
0.07%
Published
2017-10-25
Updated
2017-11-13
IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124359.
Max CVSS
4.3
EPSS Score
0.07%
Published
2017-11-27
Updated
2017-12-14
An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access. IBM X-Force ID: 123661.
Max CVSS
4.3
EPSS Score
0.05%
Published
2017-12-27
Updated
2019-10-03
IBM DOORS next Generation (DNG/RRC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123188.
Max CVSS
5.4
EPSS Score
0.06%
Published
2017-10-25
Updated
2017-11-13
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123036.
Max CVSS
5.4
EPSS Score
0.06%
Published
2017-10-25
Updated
2017-11-13
IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659.
Max CVSS
4.3
EPSS Score
0.05%
Published
2017-06-13
Updated
2017-06-20
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120209.
Max CVSS
5.4
EPSS Score
0.07%
Published
2017-06-13
Updated
2017-06-26
IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,
Max CVSS
4.3
EPSS Score
0.05%
Published
2017-05-15
Updated
2017-05-23
IBM Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119762.
Max CVSS
5.4
EPSS Score
0.08%
Published
2017-07-05
Updated
2017-07-26
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000784.
Max CVSS
8.1
EPSS Score
0.13%
Published
2017-03-31
Updated
2017-04-04
IBM Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 119529.
Max CVSS
5.4
EPSS Score
0.08%
Published
2017-07-05
Updated
2017-07-26
IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces. IBM X-Force ID: 119528.
Max CVSS
4.3
EPSS Score
0.05%
Published
2017-07-05
Updated
2017-07-11
IBM Jazz technology based products might divulge information that might be useful in helping attackers through error messages. IBM X-Force ID: 116868.
Max CVSS
4.3
EPSS Score
0.05%
Published
2017-11-27
Updated
2017-12-14
An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference #: 1999965.
Max CVSS
6.8
EPSS Score
0.09%
Published
2017-03-20
Updated
2017-03-23