IBM » Rational Engineering Lifecycle Manager » 4.0.4 : Security Vulnerabilities, CVEs,
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 136006.
Max CVSS
5.4
EPSS Score
0.06%
Published
2018-03-23
Updated
2019-10-09
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133379.
Max CVSS
5.4
EPSS Score
0.06%
Published
2018-03-23
Updated
2019-10-09
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133127.
Max CVSS
5.4
EPSS Score
0.06%
Published
2018-03-23
Updated
2019-10-09
IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625.
Max CVSS
4.3
EPSS Score
0.06%
Published
2018-03-23
Updated
2019-10-09
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852.
Max CVSS
4.3
EPSS Score
0.07%
Published
2017-11-27
Updated
2017-12-14
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970.
Max CVSS
4.3
EPSS Score
0.06%
Published
2018-03-23
Updated
2019-10-09
IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system. IBM X-Force ID: 129619.
Max CVSS
4.3
EPSS Score
0.05%
Published
2017-12-11
Updated
2017-12-26
IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127587.
Max CVSS
5.4
EPSS Score
0.06%
Published
2017-10-03
Updated
2017-10-10
IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126862.
Max CVSS
5.4
EPSS Score
0.06%
Published
2017-10-03
Updated
2017-10-10
IBM Team Concert (RTC including IBM Rational Collaborative Lifecycle Management 4.0, 5.0., and 6.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-force ID: 126858.
Max CVSS
5.4
EPSS Score
0.05%
Published
2017-12-27
Updated
2018-01-17
IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126857.
Max CVSS
5.4
EPSS Score
0.06%
Published
2017-10-03
Updated
2017-10-10
IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126686.
Max CVSS
5.4
EPSS Score
0.06%
Published
2017-10-03
Updated
2017-10-10
IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126243.
Max CVSS
5.4
EPSS Score
0.06%
Published
2017-10-03
Updated
2017-10-10
IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126242.
Max CVSS
5.4
EPSS Score
0.06%
Published
2017-10-03
Updated
2017-10-10
IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125975.
Max CVSS
5.4
EPSS Score
0.06%
Published
2017-10-03
Updated
2017-10-10
An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. IBM X-Force ID: 124631.
Max CVSS
4.3
EPSS Score
0.05%
Published
2017-11-27
Updated
2017-12-14
IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124359.
Max CVSS
4.3
EPSS Score
0.07%
Published
2017-11-27
Updated
2017-12-14
An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access. IBM X-Force ID: 123661.
Max CVSS
4.3
EPSS Score
0.05%
Published
2017-12-27
Updated
2019-10-03
IBM Rational Engineering Lifecycle Manager 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123187.
Max CVSS
5.4
EPSS Score
0.06%
Published
2017-08-10
Updated
2017-08-18
IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659.
Max CVSS
4.3
EPSS Score
0.05%
Published
2017-06-13
Updated
2017-06-20
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120209.
Max CVSS
5.4
EPSS Score
0.07%
Published
2017-06-13
Updated
2017-06-26
IBM RELM 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Max CVSS
5.4
EPSS Score
0.06%
Published
2017-06-22
Updated
2017-06-28
IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,
Max CVSS
4.3
EPSS Score
0.05%
Published
2017-05-15
Updated
2017-05-23
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000784.
Max CVSS
8.1
EPSS Score
0.13%
Published
2017-03-31
Updated
2017-04-04
IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces. IBM X-Force ID: 119528.
Max CVSS
4.3
EPSS Score
0.05%
Published
2017-07-05
Updated
2017-07-11