Login Request a demo
RT
Product
Rational Team Concert
by IBM · last CVE Mar 15, 2022
142
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities142In the news0Timeline
Severity mix
Critical 0High 9Medium 114Low 5
Severity
All severities142Critical0High9Medium114Low5
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Rational Team Concert to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-29844
8.8
1%
Oct 27
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF)
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2017-1701
8.8
1%
Apr 23
IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption algorithm, which could allow an…
Affected: 5.0 through 5.0.2; 6.0 through 6.0.5
CVE-2017-1103
8.1
1%
May 10
IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more
CVE-2016-9707
8.1
2%
Mar 31
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
Affected: 4.0; 4.0.0.1; 4.0.0.2; 4.0.1; 4.0.2; 4.0.3; +11 more
CVE-2015-7440
7.8
0%
Mar 15
IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4;…
Affected: 3.0 through 3.0.6; 4.0 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0; +1 more
CVE-2021-29774
7.5
1%
Oct 27
IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations
Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0
CVE-2020-4965
7.5
1%
Apr 12
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2019-4252
7.5
3%
Jun 27
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system
Affected: 6.0 through 6.0.6.1
CVE-2021-20502
7.1
2%
Mar 30
IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
Affected: 6.0.6; 6.0.6.1; 6.0.6.2
CVE-2018-1492
6.8
0%
Jul 10
IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous…
Affected: 5.0 through 5.0.2; 6.0.0 through 6.0.5
CVE-2015-1928
6.8
1%
Jan 2
Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4;…
Affected: 2.0; 2.0.0.1; 2.0.0.2; 3.0; 3.0.1; 3.0.1.1; +18 more
CVE-2021-29786
6.5
1%
Oct 27
IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2018-1423
6.5
1%
Jul 10
IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system
Affected: 5.0 through 5.0.2; 6.0.0 through 6.0.5
CVE-2017-1700
6.5
1%
Apr 24
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle…
Affected: 5.0 through 5.0.2; 6.0 through 6.0.5
CVE-2016-0219
6.5
1%
Jan 16
XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1…
Affected: 3.0; 3.0.1; 3.0.1.1; 3.0.1.2; 3.0.1.3; 3.0.1.4; +17 more
CVE-2016-2865
6.5
1%
Jul 15
The GIT Integration component in IBM Rational Team Concert (RTC) 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x before…
Affected: 5.0.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1
CVE-2020-4974
6.3
1%
Jul 28
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF)
Affected: 6.0.6; 6.0.6.1
CVE-2016-0325
6.3
1%
Nov 24
IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager…
Affected: 3.0.1.6; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +9 more
CVE-2015-7453
6.1
1%
Mar 15
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before…
Affected: 3.0 through 3.0.6; 4.0 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0; +1 more
CVE-2018-1694
5.9
2%
Nov 6
IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through…
Affected: 5.0.0 through 5.0.2; 6.0.0 through 6.0.6
CVE-2021-29713
5.4
0%
Oct 27
IBM Jazz Team Server products are vulnerable to cross-site scripting
Affected: 7.0
CVE-2021-29673
5.4
0%
Oct 27
IBM Jazz Team Server products are vulnerable to cross-site scripting
Affected: 6.0.1; 6.0.6; 7.0; 7.0.1; 7.0.2
CVE-2020-5004
5.4
0%
Jul 28
IBM Jazz Foundation products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1
CVE-2021-20507
5.4
0%
Jul 19
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1
CVE-2020-5031
5.4
0%
Jul 19
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1
CVE-2021-20519
5.4
1%
Apr 12
IBM Jazz Team Server products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4920
5.4
1%
Apr 12
IBM Jazz Team Server products are vulnerable to stored cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-20520
5.4
1%
Mar 30
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1; 6.0.6.2
CVE-2021-20518
5.4
1%
Mar 30
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1; 6.0.6.2
CVE-2021-20506
5.4
1%
Mar 30
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1; 6.0.6.2
CVE-2021-20504
5.4
1%
Mar 30
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1; 6.0.6.2
CVE-2021-20503
5.4
1%
Mar 30
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1; 6.0.6.2
CVE-2021-20447
5.4
1%
Mar 30
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1; 6.0.6.2
CVE-2021-20352
5.4
1%
Mar 30
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1; 6.0.6.2
CVE-2021-20351
5.4
1%
Mar 4
IBM Engineering products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-20350
5.4
1%
Mar 4
IBM Engineering products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2021-20340
5.4
1%
Mar 4
IBM Engineering products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4975
5.4
1%
Mar 4
IBM Engineering products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4866
5.4
1%
Mar 4
IBM Engineering products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4863
5.4
1%
Mar 4
IBM Engineering products are vulnerable to stored cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4857
5.4
1%
Mar 4
IBM Engineering products are vulnerable to stored cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4856
5.4
1%
Mar 4
IBM Engineering products are vulnerable to stored cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4733
5.4
1%
Jan 8
IBM Jazz Foundation products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4697
5.4
1%
Jan 8
IBM Jazz Foundation products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4691
5.4
1%
Jan 8
IBM Jazz Foundation Products are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4546
5.4
1%
Sep 2
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4522
5.4
1%
Sep 2
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4445
5.4
1%
Sep 2
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2019-4748
5.4
1%
Jul 16
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2019-4747
5.4
1%
Jul 16
IBM Team Concert (RTC) is vulnerable to cross-site scripting
Affected: 6.0.2; 6.0.6; 6.0.6.1
Page 1 of 3 · 142 total
123