Rational DOORS Next Generation vulnerabilities | LiveThreat CVE Feed

Product

Rational DOORS Next Generation

by IBM · last CVE Oct 27, 2021

153

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities153 In the news0 Timeline

Severity mix

Critical 0High 6Medium 130Low 5

Severity

All severities153 Critical0 High6 Medium130 Low5

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Rational DOORS Next Generation to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-29844	8.8	1%	Oct 27	IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2020-4495	8.8	3%	Jun 2	IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2016-9707	8.1	2%	Mar 31	IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more
CVE-2015-7440	7.8	0%	Mar 15	IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4;… Affected: 4.0 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1
CVE-2021-29774	7.5	1%	Oct 27	IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0
CVE-2019-4252	7.5	3%	Jun 27	IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system Affected: 6.0 through 6.0.6.1
CVE-2018-1492	6.8	0%	Jul 10	IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous… Affected: 5.0 through 5.0.2; 6.0.0 through 6.0.5
CVE-2015-1928	6.8	1%	Jan 2	Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4;… Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more
CVE-2021-29786	6.5	1%	Oct 27	IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2021-20371	6.5	1%	Jun 2	IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2020-4732	6.5	1%	Jun 2	IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2018-1423	6.5	1%	Jul 10	IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system Affected: 5.0 through 5.0.2; 6.0.0 through 6.0.5
CVE-2017-1700	6.5	1%	Apr 24	IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle… Affected: 5.0 through 5.0.2; 6.0 through 6.0.5
CVE-2016-0219	6.5	1%	Jan 16	XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1… Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +7 more
CVE-2020-4974	6.3	1%	Jul 28	IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2015-7453	6.1	1%	Mar 15	Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before… Affected: 4.0 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1
CVE-2018-1694	5.9	2%	Nov 6	IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through… Affected: 5.0.0 through 5.0.2; 6.0.0 through 6.0.6
CVE-2021-29713	5.4	0%	Oct 27	IBM Jazz Team Server products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-29673	5.4	0%	Oct 27	IBM Jazz Team Server products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2
CVE-2020-5004	5.4	0%	Jul 28	IBM Jazz Foundation products are vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2021-20507	5.4	0%	Jul 19	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2
CVE-2020-5031	5.4	0%	Jul 19	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 7.0; 7.0.1; 7.0.2
CVE-2021-29670	5.4	0%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2021-29668	5.4	0%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2021-20348	5.4	1%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2021-20347	5.4	1%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2021-20346	5.4	1%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2021-20345	5.4	1%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2021-20343	5.4	1%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2021-20338	5.4	0%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2020-5030	5.4	0%	Jun 2	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2020-4977	5.4	0%	Jun 2	IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2021-20351	5.4	1%	Mar 4	IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-20350	5.4	1%	Mar 4	IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-20340	5.4	1%	Mar 4	IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4975	5.4	1%	Mar 4	IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4866	5.4	1%	Mar 4	IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4863	5.4	1%	Mar 4	IBM Engineering products are vulnerable to stored cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4857	5.4	1%	Mar 4	IBM Engineering products are vulnerable to stored cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4856	5.4	1%	Mar 4	IBM Engineering products are vulnerable to stored cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4733	5.4	1%	Jan 8	IBM Jazz Foundation products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4697	5.4	1%	Jan 8	IBM Jazz Foundation products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4691	5.4	1%	Jan 8	IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4546	5.4	1%	Sep 2	IBM Jazz Team Server based Applications are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4522	5.4	1%	Sep 2	IBM Jazz Team Server based Applications are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4445	5.4	1%	Sep 2	IBM Jazz Team Server based Applications are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2019-4748	5.4	1%	Jul 16	IBM Jazz Team Server based Applications are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4297	5.4	1%	Jun 19	IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4295	5.4	1%	Jun 19	IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4281	5.4	1%	Jun 19	IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1