Login Request a demo
RE
Product
Rational Engineering Lifecycle Manager
by IBM · last CVE Oct 27, 2021
141
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities141In the news0Timeline
Severity mix
Critical 0High 12Medium 120Low 5
Severity
All severities141Critical0High12Medium120Low5
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Rational Engineering Lifecycle Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-29844
8.8
1%
Oct 27
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF)
Affected: 7.0; 7.0.1; 7.0.2
CVE-2020-4495
8.8
3%
Jun 2
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control
Affected: 6.0.6; 6.0.6.1
CVE-2016-9707
8.1
2%
Mar 31
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more
CVE-2015-7440
7.8
0%
Mar 15
IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4;…
Affected: 4.0.3 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1
CVE-2021-29774
7.5
1%
Oct 27
IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations
Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2020-4965
7.5
1%
Apr 12
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2019-4252
7.5
3%
Jun 27
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system
Affected: 6.0 through 6.0.6.1
CVE-2018-1608
7.5
1%
May 1
IBM Rational Engineering Lifecycle Manager 6.0 through 6.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive…
Affected: 6.0 through 6.0.6
CVE-2021-20502
7.1
2%
Mar 30
IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2018-1846
7.1
2%
Nov 2
IBM Rational Engineering Lifecycle Manager 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data
Affected: 5.0 through 5.0.2; 6.0 through 6.0.6
CVE-2018-1607
7.1
2%
Sep 25
IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data
Affected: 5.0 through 5.0.2; 6.0 through 6.0.6
CVE-2018-1588
7.1
2%
Sep 25
IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6) is vulnerable to a XML External Entity Injection (XXE) attack when…
Affected: 5.0 through 5.0.2; 6.0 through 6.0.6
CVE-2018-1492
6.8
0%
Jul 10
IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous…
Affected: 5.0 through 5.0.2; 6.0.0 through 6.0.5
CVE-2015-1928
6.8
1%
Jan 2
Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4;…
Affected: 1.0; 1.0.0.1; 4.0.3; 4.0.4; 4.0.5; 4.0.6; +4 more
CVE-2021-29786
6.5
1%
Oct 27
IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user
Affected: 7.0
CVE-2021-20371
6.5
1%
Jun 2
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser
Affected: 6.0.6; 6.0.6.1
CVE-2020-4732
6.5
1%
Jun 2
IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions
Affected: 6.0.6; 6.0.6.1
CVE-2018-1539
6.5
1%
Sep 25
IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 could allow remote attackers to bypass authentication via a direct request or forced browsing to…
Affected: 5.0.0 through 5.0.2; 6.0.0 through 6.0.6
CVE-2018-1423
6.5
1%
Jul 10
IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system
Affected: 5.0 through 5.0.2; 6.0.0 through 6.0.5
CVE-2017-1700
6.5
1%
Apr 24
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle…
Affected: 5.0 through 5.0.2; 6.0 through 6.0.5
CVE-2016-0219
6.5
1%
Jan 16
XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1…
Affected: 4.0.3; 4.0.4; 4.0.5; 4.0.6; 4.0.7; 5.0; +4 more
CVE-2020-4974
6.3
1%
Jul 28
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF)
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2015-7453
6.1
1%
Mar 15
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before…
Affected: 4.0.3 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0; 6.0.1
CVE-2018-1694
5.9
2%
Nov 6
IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through…
Affected: 5.0.0 through 5.0.2; 6.0.0 through 6.0.6
CVE-2021-29713
5.4
0%
Oct 27
IBM Jazz Team Server products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2021-29673
5.4
0%
Oct 27
IBM Jazz Team Server products are vulnerable to cross-site scripting
Affected: 7.0
CVE-2020-5004
5.4
0%
Jul 28
IBM Jazz Foundation products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-20507
5.4
0%
Jul 19
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
Affected: 7.0; 7.0.1; 7.0.2
CVE-2020-5031
5.4
0%
Jul 19
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
Affected: 7.0; 7.0.1; 7.0.2
CVE-2021-29670
5.4
0%
Jun 2
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1
CVE-2021-29668
5.4
0%
Jun 2
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1
CVE-2021-20348
5.4
1%
Jun 2
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF)
Affected: 6.0.6; 6.0.6.1
CVE-2021-20347
5.4
1%
Jun 2
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF)
Affected: 6.0.6; 6.0.6.1
CVE-2021-20346
5.4
1%
Jun 2
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF)
Affected: 6.0.6; 6.0.6.1
CVE-2021-20345
5.4
1%
Jun 2
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF)
Affected: 6.0.6; 6.0.6.1
CVE-2021-20343
5.4
1%
Jun 2
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF)
Affected: 6.0.6; 6.0.6.1
CVE-2021-20338
5.4
0%
Jun 2
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1
CVE-2020-5030
5.4
0%
Jun 2
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1
CVE-2020-4977
5.4
0%
Jun 2
IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting
Affected: 6.0.6; 6.0.6.1
CVE-2021-20519
5.4
1%
Apr 12
IBM Jazz Team Server products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4920
5.4
1%
Apr 12
IBM Jazz Team Server products are vulnerable to stored cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-20520
5.4
1%
Mar 30
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-20518
5.4
1%
Mar 30
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-20506
5.4
1%
Mar 30
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-20504
5.4
1%
Mar 30
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-20503
5.4
1%
Mar 30
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-20447
5.4
1%
Mar 30
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-20352
5.4
1%
Mar 30
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-20357
5.4
1%
Jan 27
IBM Jazz Foundation products is vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4865
5.4
1%
Jan 27
IBM Jazz Foundation products is vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
Page 1 of 3 · 141 total
123