RQ
Product
Rational Quality Manager
202
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 177Low 5
Watch
Add Rational Quality Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-4495 | 8.8 | Jun 2 | IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control Affected: 6.0.6; 6.0.6.1 |
| CVE-2016-0326 | 8.8 | Oct 22 | IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1… Affected: 3.0.1.6; 4.0; 4.0.0.1; 4.0.0.2; 4.0.1; 4.0.2; +10 more |
| CVE-2017-1103 | 8.1 | May 10 | IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more |
| CVE-2016-9707 | 8.1 | Mar 31 | IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data Affected: 4.0; 4.0.0.1; 4.0.0.2; 4.0.1; 4.0.2; 4.0.3; +11 more |
| CVE-2015-7440 | 7.8 | Mar 15 | IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4;… Affected: 3.0 through 3.0.1.6; 4.0 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0; +1 more |
| CVE-2020-4965 | 7.5 | Apr 12 | IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2019-4252 | 7.5 | Jun 27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system Affected: 6.0 through 6.0.6.1 |
| CVE-2018-1492 | 6.8 | Jul 10 | IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous… Affected: 5.0 through 5.0.2; 6.0.0 through 6.0.5 |
| CVE-2015-1928 | 6.8 | Jan 2 | Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4;… Affected: 2.0; 2.0.1; 3.0; 3.0.1; 3.0.1.1; 3.0.1.2; +17 more |
| CVE-2021-20371 | 6.5 | Jun 2 | IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser Affected: 6.0.6; 6.0.6.1 |
| CVE-2020-4732 | 6.5 | Jun 2 | IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions Affected: 6.0.6; 6.0.6.1 |
| CVE-2018-1423 | 6.5 | Jul 10 | IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system Affected: 5.0 through 5.0.2; 6.0.0 through 6.0.5 |
| CVE-2017-1700 | 6.5 | Apr 24 | IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle… Affected: 5.0 through 5.0.2; 6.0 through 6.0.5 |
| CVE-2016-0219 | 6.5 | Jan 16 | XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1… Affected: 3.0; 3.0.1; 3.0.1.1; 3.0.1.2; 3.0.1.3; 3.0.1.4; +16 more |
| CVE-2020-4974 | 6.3 | Jul 28 | IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1 |
| CVE-2017-1248 | 6.1 | Jul 6 | IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection Affected: 5.0 through 5.0.2; 6.0 through 6.0.5 |
| CVE-2015-7453 | 6.1 | Mar 15 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before… Affected: 3.0 through 3.0.1.6; 4.0 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0; +1 more |
| CVE-2018-1694 | 5.9 | Nov 6 | IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through… Affected: 5.0.0 through 5.0.2; 6.0.0 through 6.0.6 |
| CVE-2021-38934 | 5.4 | Aug 29 | IBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1 |
| CVE-2020-5004 | 5.4 | Jul 28 | IBM Jazz Foundation products are vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1 |
| CVE-2021-29670 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1 |
| CVE-2021-29668 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1 |
| CVE-2021-20348 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1 |
| CVE-2021-20347 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1 |
| CVE-2021-20346 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1 |
| CVE-2021-20345 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1 |
| CVE-2021-20343 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1 |
| CVE-2021-20338 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1 |
| CVE-2020-5030 | 5.4 | Jun 2 | IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1 |
| CVE-2020-4977 | 5.4 | Jun 2 | IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting Affected: 6.0.6; 6.0.6.1 |
| CVE-2021-20519 | 5.4 | Apr 12 | IBM Jazz Team Server products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4920 | 5.4 | Apr 12 | IBM Jazz Team Server products are vulnerable to stored cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20351 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20350 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20340 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4975 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4866 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4863 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to stored cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4857 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to stored cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4856 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to stored cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20357 | 5.4 | Jan 27 | IBM Jazz Foundation products is vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4865 | 5.4 | Jan 27 | IBM Jazz Foundation products is vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4855 | 5.4 | Jan 27 | IBM Jazz Foundation products is vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4547 | 5.4 | Jan 27 | IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4524 | 5.4 | Jan 27 | IBM Jazz Foundation products is vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4733 | 5.4 | Jan 8 | IBM Jazz Foundation products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4697 | 5.4 | Jan 8 | IBM Jazz Foundation products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4691 | 5.4 | Jan 8 | IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4546 | 5.4 | Sep 2 | IBM Jazz Team Server based Applications are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4522 | 5.4 | Sep 2 | IBM Jazz Team Server based Applications are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |