RC
Product
Rational Collaborative Lifecycle Management
143
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 126Low 5
Watch
Add Rational Collaborative Lifecycle Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-2926 | 5.4 | Nov 25 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational… Affected: 3.0.1.6; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +9 more |
| CVE-2016-2864 | 5.4 | Nov 24 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before… Affected: 3.0.1.6; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +9 more |
| CVE-2016-0284 | 5.4 | Nov 24 | The XML parser in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational… Affected: 3.0.1.6; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +9 more |
| CVE-2016-0273 | 5.4 | Nov 24 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before… Affected: 3.0.1.6; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +9 more |
| CVE-2016-0331 | 5.4 | Sep 12 | Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before… Affected: 6.0.1; 6.0.2 |
| CVE-2017-1488 | 5.3 | Jul 6 | An undisclosed vulnerability in Jazz common products exists with potential for information disclosure Affected: 6.0.0 through 6.0.5; 5.0.1 |
| CVE-2017-1239 | 5.3 | Jul 6 | IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Error responses Affected: 5.0.0 through 6.0.3 |
| CVE-2016-6040 | 5.0 | Feb 1 | IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more |
| CVE-2015-7471 | 4.8 | Mar 15 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before… Affected: 3.0.1 through 6.0.1 |
| CVE-2019-4084 | 4.3 | Jun 27 | IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM… Affected: 6.0 through 6.0.6.1 |
| CVE-2018-1734 | 4.3 | Jun 27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information in error messages that may be used by a malicious user to orchestrate further… Affected: 6.0 through 6.0.6.1 |
| CVE-2018-1606 | 4.3 | Nov 6 | IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0… Affected: 5.0.0 through 6.0.6 |
| CVE-2017-1559 | 4.3 | Jul 6 | Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests Affected: 6.0.0 through 6.0.5; 5.0.1 |
| CVE-2017-1509 | 4.3 | Jul 6 | IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks Affected: 6.0.0 through 6.0.5; 5.0.1 |
| CVE-2017-1734 | 4.3 | Apr 24 | IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle… Affected: after 5.0 through 6.0.5 |
| CVE-2017-1725 | 4.3 | Apr 24 | IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle… Affected: after 5.0 through 6.0.5 |
| CVE-2017-1602 | 4.3 | Mar 23 | IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially… Affected: 4.0.0 through 6.0.5 |
| CVE-2017-1524 | 4.3 | Mar 23 | IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP… Affected: 4.0.0 through 6.0.5 |
| CVE-2017-1191 | 4.3 | Dec 27 | An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access Affected: 4.0.0 through 6.0.4 |
| CVE-2017-1507 | 4.3 | Dec 11 | IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more |
| CVE-2017-1570 | 4.3 | Nov 27 | IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more |
| CVE-2017-1251 | 4.3 | Nov 27 | An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more |
| CVE-2017-1240 | 4.3 | Nov 27 | IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more |
| CVE-2016-6024 | 4.3 | Nov 27 | IBM Jazz technology based products might divulge information that might be useful in helping attackers through error messages Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more |
| CVE-2017-1295 | 4.3 | Oct 25 | IBM RSA DM contains unspecified vulnerability in CLM Applications with potential for information leakage Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +10 more |
| CVE-2017-1241 | 4.3 | Oct 25 | An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +10 more |
| CVE-2016-9700 | 4.3 | Jul 5 | IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces Affected: 4.0; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +11 more |
| CVE-2017-1099 | 4.3 | Jun 13 | IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions Affected: 4.0; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; +8 more |
| CVE-2016-9735 | 4.3 | May 15 | IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces Affected: 4.0; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; +8 more |
| CVE-2016-2866 | 4.3 | Feb 8 | An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more |
| CVE-2016-6028 | 4.3 | Feb 1 | IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more |
| CVE-2015-1971 | 4.3 | Jan 3 | Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10;… Affected: 3.0.1; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more |
| CVE-2016-0372 | 3.7 | Nov 24 | IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager… Affected: 3.0.1.6; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +9 more |
| CVE-2015-4962 | 3.5 | Jan 3 | Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational… Affected: 3.0.1; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more |
| CVE-2015-7449 | 3.3 | Mar 20 | IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Quality… Affected: 4.0.0 through 6.0.2 |
| CVE-2015-4946 | 3.3 | Jan 3 | Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x… Affected: 3.0.1; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more |
| CVE-2016-2947 | 2.7 | Nov 25 | IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0… Affected: 3.0.1.6; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +9 more |
| CVE-2015-0130 | – | Jul 20 | Cross-site scripting (XSS) vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 4.x before 4.0.7 IF6 and 5.x before 5.0.2… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +4 more |
| CVE-2015-0112 | – | Jun 7 | Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Quality Manager (RQM)… Affected: 3.0.1; 3.0.1.1; 3.0.1.2; 3.0.1.3; 3.0.1.4; 3.0.1.5; +12 more |
| CVE-2015-0113 | – | Apr 27 | The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more |
| CVE-2014-6131 | – | Mar 18 | IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x… Affected: 3.0.0; 3.0.1; 3.0.1.1; 3.0.1.2; 3.0.1.3; 3.0.1.4; +13 more |
| CVE-2014-6129 | – | Mar 18 | IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x… Affected: 3.0.0; 3.0.1; 3.0.1.1; 3.0.1.2; 3.0.1.3; 3.0.1.4; +13 more |
| CVE-2014-0862 | – | Mar 2 | Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x before 3.0.1.6 iFix 2 and 4.x before 4.0.6 allows remote attackers to… Affected: 3.0.0; 3.0.1; 3.0.1.1; 3.0.1.2; 3.0.1.3; 3.0.1.4; +8 more |