Login Request a demo
RD
Product
Rational DOORS Next Generation
by IBM · last CVE Oct 27, 2021
153
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities153In the news0Timeline
Severity mix
Critical 0High 6Medium 130Low 5
Severity
All severities153Critical0High6Medium130Low5
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Rational DOORS Next Generation to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-6055
5.4
1%
Feb 23
IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting
Affected: 5.0; 5.0.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1; +1 more
CVE-2017-1128
5.4
1%
Feb 8
IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting
Affected: 5.0; 5.0.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1; +1 more
CVE-2017-1127
5.4
1%
Feb 8
IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting
Affected: 5.0; 5.0.0; 5.0.1; 5.0.2; 6.0; 6.0.0; +2 more
CVE-2016-3014
5.4
1%
Nov 30
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Quality Manager 4.0…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more
CVE-2016-2926
5.4
1%
Nov 25
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix19, and 6.0 before 6.0.2 iFix3; Rational…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more
CVE-2016-5955
5.4
1%
Nov 25
Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 6.0.2 before iFix004 allows remote authenticated users to inject arbitrary web script or HTML via…
Affected: 6.0.2
CVE-2016-2986
5.4
1%
Nov 25
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 6.x before 6.0.1 iFix6, Rational Quality Manager 6.x before 6.0.1 iFix6, Rational Team…
Affected: 6.0.0; 6.0.1; 6.0.2
CVE-2016-2864
5.4
1%
Nov 24
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more
CVE-2016-0284
5.4
1%
Nov 24
The XML parser in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more
CVE-2016-0273
5.4
1%
Nov 24
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more
CVE-2017-1488
5.3
1%
Jul 6
An undisclosed vulnerability in Jazz common products exists with potential for information disclosure
Affected: 6.0.0 through 6.0.5; 5.0.1
CVE-2015-7471
4.8
1%
Mar 15
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before…
Affected: 4.0 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1
CVE-2020-4544
4.3
1%
Jan 8
IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2020-4487
4.3
1%
Jan 8
IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2019-4084
4.3
1%
Jun 27
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM…
Affected: 6.0 through 6.0.6.1
CVE-2018-1734
4.3
1%
Jun 27
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information in error messages that may be used by a malicious user to orchestrate further…
Affected: 6.0 through 6.0.6.1
CVE-2018-1606
4.3
1%
Nov 6
IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0…
Affected: 5.0.0 through 5.0.2; 6.0.0 through 6.0.6
CVE-2017-1559
4.3
1%
Jul 6
Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests
Affected: 6.0.0 through 6.0.5; 5.0.1
CVE-2017-1509
4.3
1%
Jul 6
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks
Affected: 6.0.0 through 6.0.5; 5.0.1
CVE-2017-1734
4.3
1%
Apr 24
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle…
Affected: 5.0 through 5.0.2; 6.0 through 6.0.5
CVE-2017-1725
4.3
1%
Apr 24
IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle…
Affected: 5.0 through 5.0.2; 6.0 through 6.0.5
CVE-2017-1602
4.3
1%
Mar 23
IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially…
Affected: 4.0.1 through 4.0.7; 6.0.0 through 6.0.5; 5.0.0; 5.0.1; 5.0.2
CVE-2017-1524
4.3
2%
Mar 23
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP…
Affected: 4.0.1 through 4.0.7; 6.0.0 through 6.0.5; 5.0.0; 5.0.1; 5.0.2
CVE-2017-1191
4.3
1%
Dec 27
An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access
Affected: 4.0.1 through 4.0.7; 5.0.0 through 5.0.2; 6.0.0 through 6.0.4
CVE-2017-1507
4.3
1%
Dec 11
IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system
Affected: 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; +9 more
CVE-2017-1570
4.3
1%
Nov 27
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces
Affected: 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; +9 more
CVE-2017-1251
4.3
1%
Nov 27
An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker
Affected: 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; +9 more
CVE-2017-1240
4.3
1%
Nov 27
IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses
Affected: 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; +9 more
CVE-2016-6024
4.3
1%
Nov 27
IBM Jazz technology based products might divulge information that might be useful in helping attackers through error messages
Affected: 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; +9 more
CVE-2016-9700
4.3
1%
Jul 5
IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces
Affected: 4.0; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +11 more
CVE-2017-1099
4.3
3%
Jun 13
IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions
Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more
CVE-2016-9735
4.3
1%
May 15
IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces
Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more
CVE-2016-6060
4.3
1%
Feb 15
An undisclosed vulnerability in IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 could allow a JazzGuest user to see project names
Affected: 5.0; 5.0.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1; +1 more
CVE-2016-9748
4.3
1%
Feb 8
IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further attacks against the system
Affected: 5.0; 5.0.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1; +1 more
CVE-2016-2987
4.3
1%
Feb 1
An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker
Affected: 4.0; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +10 more
CVE-2015-1971
4.3
1%
Jan 3
Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10;…
Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more
CVE-2016-0372
3.7
1%
Nov 24
IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more
CVE-2015-4962
3.5
0%
Jan 3
Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational…
Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more
CVE-2015-7449
3.3
0%
Mar 20
IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Quality…
Affected: 4.0.0 through 4.0.7; 5.0.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1; +1 more
CVE-2015-4946
3.3
0%
Jan 3
Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x…
Affected: 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more
CVE-2016-2947
2.7
1%
Nov 25
IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +8 more
CVE-2015-0130
–
1%
Jul 20
Cross-site scripting (XSS) vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 4.x before 4.0.7 IF6 and 5.x before 5.0.2…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +4 more
CVE-2015-0112
–
1%
Jun 7
Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Quality Manager (RQM)…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +4 more
CVE-2015-0121
–
0%
May 30
IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more
CVE-2015-0113
–
1%
Apr 27
The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +4 more
CVE-2015-0132
–
1%
Mar 18
The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5 and 4.x before…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +4 more
CVE-2015-0125
–
1%
Mar 18
Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 4.x before 4.0.7…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +4 more
CVE-2014-6131
–
1%
Mar 18
IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more
CVE-2014-6129
–
1%
Mar 18
IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +5 more
CVE-2014-3092
–
2%
Sep 12
IBM Jazz Team Server, as used in Rational Collaborative Lifecycle Management; Rational Quality Manager 3.x before 3.0.1.6 iFix 3, 4.x before 4.0.7, and 5.x before 5.0.1; and other…
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +2 more
Page 3 of 4 · 153 total
1234