RR
Product
Rational Requirements Composer
38
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 17Low 3
Watch
Add Rational Requirements Composer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-7440 | 7.8 | Mar 15 | IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4;… Affected: 3.0 through 3.0.1.6; 4.0 through 4.0.7 |
| CVE-2015-1928 | 6.8 | Jan 2 | Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4;… Affected: 2.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.0.0.4; 3.0; +17 more |
| CVE-2016-0219 | 6.5 | Jan 16 | XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1… Affected: 3.0; 3.0.1; 3.0.1.1; 3.0.1.2; 3.0.1.3; 3.0.1.4; +10 more |
| CVE-2015-7453 | 6.1 | Mar 15 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before… Affected: 3.0 through 3.0.1.6; 4.0 through 4.0.7 |
| CVE-2018-1529 | 5.4 | Jul 19 | IBM Rational DOORS Next Generation 5.0 through 5.0.2, 6.0 through 6.0.5 and IBM Rational Requirements Composer 5.0 through 5.0.2 are vulnerable to cross-site scripting Affected: 5.0.0 through 5.0.2 |
| CVE-2017-1790 | 5.4 | Apr 12 | IBM DOORS Next Generation (DNG/RRC) 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to cross-site scripting Affected: 5.0; 5.0.1; 5.0.2 |
| CVE-2017-1546 | 5.4 | Dec 13 | IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0, and 6.0 is vulnerable to cross-site scripting Affected: 4.0; 4.0.7; 5.0; 5.0.1; 5.0.2 |
| CVE-2017-1338 | 5.4 | Aug 18 | IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting Affected: 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; +4 more |
| CVE-2017-1278 | 5.4 | Jun 12 | IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection Affected: 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; +1 more |
| CVE-2017-1276 | 5.4 | Jun 12 | IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting Affected: 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; +1 more |
| CVE-2017-1247 | 5.4 | Jun 12 | IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting Affected: 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; +1 more |
| CVE-2016-6055 | 5.4 | Feb 23 | IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting Affected: 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; +1 more |
| CVE-2017-1128 | 5.4 | Feb 8 | IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting Affected: 4.0; 4.0.0; 4.0.0.1; 4.0.0.2; 4.0.1; 4.0.2; +5 more |
| CVE-2017-1127 | 5.4 | Feb 8 | IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting Affected: 4.0; 4.0.0; 4.0.0.1; 4.0.0.2; 4.0.1; 4.0.2; +5 more |
| CVE-2015-7471 | 4.8 | Mar 15 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before… Affected: 3.0 through 3.0.1.6; 4.0 through 4.0.7 |
| CVE-2016-6060 | 4.3 | Feb 15 | An undisclosed vulnerability in IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 could allow a JazzGuest user to see project names Affected: 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.0.6; +1 more |
| CVE-2016-9748 | 4.3 | Feb 8 | IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further attacks against the system Affected: 4.0.7 |
| CVE-2015-1971 | 4.3 | Jan 3 | Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10;… Affected: 2.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.0.0.4; 3.0; +17 more |
| CVE-2015-4962 | 3.5 | Jan 3 | Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational… Affected: 2.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.0.0.4; 3.0; +17 more |
| CVE-2015-7449 | 3.3 | Mar 20 | IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Quality… Affected: 4.0.0 through 4.0.7 |
| CVE-2015-4946 | 3.3 | Jan 3 | Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x… Affected: 2.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.0.0.4; 3.0; +17 more |
| CVE-2015-0130 | – | Jul 20 | Cross-site scripting (XSS) vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 4.x before 4.0.7 IF6 and 5.x before 5.0.2… Affected: 4.0.0; 4.0.0.1; 4.0.0.2; 4.0.1; 4.0.2; 4.0.3; +4 more |
| CVE-2015-0112 | – | Jun 7 | Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Quality Manager (RQM)… Affected: 2.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.0.0.4; 3.0; +34 more |
| CVE-2015-0121 | – | May 30 | IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single… Affected: 3.0; 3.0.1; 3.0.1.1; 3.0.1.2; 3.0.1.3; 3.0.1.4; +13 more |
| CVE-2015-0113 | – | Apr 27 | The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert… Affected: 4.0.0; 4.0.0.1; 4.0.0.2; 4.0.1; 4.0.2; 4.0.3; +4 more |
| CVE-2015-0132 | – | Mar 18 | The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5 and 4.x before… Affected: 2.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.0.0.4; 3.0; +18 more |
| CVE-2015-0125 | – | Mar 18 | Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 4.x before 4.0.7… Affected: 4.0.0; 4.0.0.1; 4.0.0.2; 4.0.1; 4.0.2; 4.0.3; +4 more |
| CVE-2014-6131 | – | Mar 18 | IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x… Affected: 2.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.0.0.4; 3.0; +7 more |
| CVE-2014-6129 | – | Mar 18 | IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x… Affected: 2.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.0.0.4; 3.0; +7 more |
| CVE-2014-3092 | – | Sep 12 | IBM Jazz Team Server, as used in Rational Collaborative Lifecycle Management; Rational Quality Manager 3.x before 3.0.1.6 iFix 3, 4.x before 4.0.7, and 5.x before 5.0.1; and other… Affected: 2.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.0.0.4; 3.0; +17 more |
| CVE-2014-0846 | – | Mar 4 | Cross-site scripting (XSS) vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4.x before 4.0.6, and Rational DOORS Next Generation 4.x before 4.0.6,… Affected: 3.0.1; 3.0.1.1; 3.0.1.2; 3.0.1.3; 3.0.1.4; 3.0.1.5; +9 more |
| CVE-2014-0845 | – | Mar 4 | Open redirect vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4.x before 4.0.6, and Rational DOORS Next Generation 4.x before 4.0.6, allows remote… Affected: 3.0.1; 3.0.1.1; 3.0.1.2; 3.0.1.3; 3.0.1.4; 3.0.1.5; +9 more |
| CVE-2014-0844 | – | Mar 4 | Unspecified vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4.x before 4.0.6, and Rational DOORS Next Generation 4.x before 4.0.6, allows remote… Affected: 3.0.1; 3.0.1.1; 3.0.1.2; 3.0.1.3; 3.0.1.4; 3.0.1.5; +9 more |
| CVE-2013-5404 | – | Dec 10 | Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5,… Affected: 2.0; 2.0.0.1; 2.0.0.2; 2.0.0.3; 2.0.0.4; 3.0; +12 more |
| CVE-2013-3039 | – | Sep 12 | IBM Rational Requirements Composer before 4.0.4 does not properly perform authentication, which has unspecified impact and remote attack vectors Affected: through 4.0.3; 4.0.0; 4.0.1; 4.0.2 |
| CVE-2013-3038 | – | Sep 12 | Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for remote attackers to discover credentials via unknown vectors Affected: through 4.0.3; 4.0.0; 4.0.1; 4.0.2 |
| CVE-2013-3037 | – | Sep 12 | Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for local users to gain privileges via unknown vectors Affected: through 4.0.3; 4.0.0; 4.0.1; 4.0.2 |
| CVE-2013-3036 | – | Sep 12 | Open redirect vulnerability in IBM Rational Requirements Composer before 4.0.4 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing… Affected: through 4.0.3; 4.0.0; 4.0.1; 4.0.2 |
Showing 38
