Login Request a demo
RT
Product
Rational Team Concert
by IBM · last CVE Mar 15, 2022
142
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities142In the news0Timeline
Severity mix
Critical 0High 9Medium 114Low 5
Severity
All severities142Critical0High9Medium114Low5
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Rational Team Concert to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-29844
8.8
1%
Oct 27
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF)
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2017-1701
8.8
1%
Apr 23
IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, and 6.0.5 stores credentials for users using a weak encryption algorithm, which could allow an…
Affected: 5.0 through 5.0.2; 6.0 through 6.0.5
CVE-2017-1103
8.1
1%
May 10
IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; +9 more
CVE-2016-9707
8.1
2%
Mar 31
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
Affected: 4.0; 4.0.0.1; 4.0.0.2; 4.0.1; 4.0.2; 4.0.3; +11 more
CVE-2015-7440
7.8
0%
Mar 15
IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4;…
Affected: 3.0 through 3.0.6; 4.0 through 4.0.7; 5.0; 5.0.1; 5.0.2; 6.0; +1 more
CVE-2021-29774
7.5
1%
Oct 27
IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations
Affected: 6.0.2; 6.0.6; 6.0.6.1; 7.0
CVE-2020-4965
7.5
1%
Apr 12
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information
Affected: 6.0.2; 6.0.6; 6.0.6.1
CVE-2019-4252
7.5
3%
Jun 27
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system
Affected: 6.0 through 6.0.6.1
CVE-2021-20502
7.1
2%
Mar 30
IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
Affected: 6.0.6; 6.0.6.1; 6.0.6.2
Showing 9