RT
Product
Rational Team Concert
147
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 119Low 5
Watch
Add Rational Team Concert to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1492 | 6.8 | Jul 10 | IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous… Affected: 5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; +3 more |
| CVE-2015-1928 | 6.8 | Jan 2 | Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4;… Affected: 2.0; 2.0.0.1; 2.0.0.2; 3.0; 3.0.1; 3.0.1.1; +18 more |
| CVE-2021-29786 | 6.5 | Oct 27 | IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2018-1423 | 6.5 | Jul 10 | IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system Affected: 5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; +3 more |
| CVE-2017-1700 | 6.5 | Apr 24 | IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle… Affected: 5.0; 5.0.2; 5.0.1; 6.0; 6.0.1; 6.0.2; +3 more |
| CVE-2016-0219 | 6.5 | Jan 16 | XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1… Affected: 3.0; 3.0.1; 3.0.1.1; 3.0.1.2; 3.0.1.3; 3.0.1.4; +17 more |
| CVE-2016-2865 | 6.5 | Jul 15 | The GIT Integration component in IBM Rational Team Concert (RTC) 5.x before 5.0.2 iFix14 and 6.x before 6.0.1 iFix5 and Rational Collaborative Lifecycle Management 5.x before… Affected: 5.0.0; 5.0.1; 5.0.2; 6.0.0; 6.0.1 |
| CVE-2020-4974 | 6.3 | Jul 28 | IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1 |
| CVE-2016-0325 | 6.3 | Nov 24 | IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager… Affected: 3.0.1.6; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +9 more |
| CVE-2015-7453 | 6.1 | Mar 15 | Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before… Affected: 3.0 through 3.0.6; 4.0 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0; +1 more |
| CVE-2018-1694 | 5.9 | Nov 6 | IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through… Affected: 5.0; 6.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; +4 more |
| CVE-2021-29713 | 5.4 | Oct 27 | IBM Jazz Team Server products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-29673 | 5.4 | Oct 27 | IBM Jazz Team Server products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-5004 | 5.4 | Jul 28 | IBM Jazz Foundation products are vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1 |
| CVE-2021-20507 | 5.4 | Jul 19 | IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1 |
| CVE-2020-5031 | 5.4 | Jul 19 | IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1 |
| CVE-2021-20519 | 5.4 | Apr 12 | IBM Jazz Team Server products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4920 | 5.4 | Apr 12 | IBM Jazz Team Server products are vulnerable to stored cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20520 | 5.4 | Mar 30 | IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20518 | 5.4 | Mar 30 | IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20506 | 5.4 | Mar 30 | IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20504 | 5.4 | Mar 30 | IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20503 | 5.4 | Mar 30 | IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20447 | 5.4 | Mar 30 | IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20352 | 5.4 | Mar 30 | IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20351 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20350 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20340 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4975 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4866 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4863 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to stored cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4857 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to stored cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4856 | 5.4 | Mar 4 | IBM Engineering products are vulnerable to stored cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2021-20357 | 5.4 | Jan 27 | IBM Jazz Foundation products is vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4865 | 5.4 | Jan 27 | IBM Jazz Foundation products is vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4855 | 5.4 | Jan 27 | IBM Jazz Foundation products is vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4547 | 5.4 | Jan 27 | IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4524 | 5.4 | Jan 27 | IBM Jazz Foundation products is vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4733 | 5.4 | Jan 8 | IBM Jazz Foundation products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4697 | 5.4 | Jan 8 | IBM Jazz Foundation products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4691 | 5.4 | Jan 8 | IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1 |
| CVE-2020-4546 | 5.4 | Sep 2 | IBM Jazz Team Server based Applications are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0 |
| CVE-2020-4522 | 5.4 | Sep 2 | IBM Jazz Team Server based Applications are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0 |
| CVE-2020-4445 | 5.4 | Sep 2 | IBM Jazz Team Server based Applications are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0 |
| CVE-2019-4748 | 5.4 | Jul 16 | IBM Jazz Team Server based Applications are vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0 |
| CVE-2019-4747 | 5.4 | Jul 16 | IBM Team Concert (RTC) is vulnerable to cross-site scripting Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0 |
| CVE-2019-4250 | 5.4 | Jun 27 | IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting Affected: 6.0 through 6.0.6.1 |
| CVE-2019-4249 | 5.4 | Jun 27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0 through 6.0.6.1 |
| CVE-2019-4083 | 5.4 | Jun 27 | IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting Affected: 6.0 through 6.0.6.1 |
| CVE-2018-1893 | 5.4 | Jun 27 | IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting Affected: 6.0 through 6.0.6.1 |