RC
Product
Rational Collaborative Lifecycle Management
17
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 15Low 0
Watch
Add Rational Collaborative Lifecycle Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-1103 | 8.1 | May 10 | IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data Affected: 4.0.7, 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3 |
| CVE-2016-9707 | 8.1 | Mar 31 | IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data Affected: 3.0.1; 4.0; 3.0.1.6; 4.0.1; 4.0.2; 4.0.3; +11 more |
| CVE-2016-2981 | 6.8 | Mar 20 | An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials Affected: 3.0.1; 4.0; 3.0.1.6; 4.0.1; 4.0.2; 4.0.3; +11 more |
| CVE-2016-6035 | 5.4 | May 10 | IBM Rational Quality Manager is vulnerable to cross-site scripting Affected: 4.0.7, 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3 |
| CVE-2016-6022 | 5.4 | Mar 31 | IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting Affected: 3.0.1; 4.0; 3.0.1.6; 4.0.1; 4.0.2; 4.0.3; +11 more |
| CVE-2016-6036 | 5.4 | Mar 31 | IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting Affected: 3.0.1; 4.0; 3.0.1.6; 4.0.1; 4.0.2; 4.0.3; +11 more |
| CVE-2016-6031 | 5.4 | Mar 31 | IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting Affected: 3.0.1; 4.0; 3.0.1.6; 4.0.1; 4.0.2; 4.0.3; +11 more |
| CVE-2016-8968 | 5.4 | Feb 15 | IBM Jazz Foundation is vulnerable to cross-site scripting Affected: 3.0.1; 4.0; 3.0.1.6; 4.0.1; 4.0.2; 4.0.3; +11 more |
| CVE-2016-6032 | 5.4 | Feb 8 | IBM Rational Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting Affected: 3.0.1; 4.0; 3.0.1.6; 4.0.1; 4.0.2; 4.0.3; +11 more |
| CVE-2016-6061 | 5.4 | Feb 1 | IBM Jazz Foundation is vulnerable to cross-site scripting Affected: 3.0.1; 4.0; 3.0.1.6; 4.0.1; 4.0.2; 4.0.3; +11 more |
| CVE-2016-6030 | 5.4 | Feb 1 | IBM Jazz Foundation is vulnerable to cross-site scripting Affected: 3.0.1; 4.0; 3.0.1.6; 4.0.1; 4.0.2; 4.0.3; +11 more |
| CVE-2016-6040 | 5.0 | Feb 1 | IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced Affected: 3.0.1; 4.0; 3.0.1.6; 4.0.1; 4.0.2; 4.0.3; +11 more |
| CVE-2016-6037 | 4.8 | May 10 | IBM Rational Team Concert (RTC) is vulnerable to HTML injection Affected: 4.0.7, 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3 |
| CVE-2016-9735 | 4.3 | May 15 | IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces Affected: 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 5.0, 4.0.7, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2, 6.0.3 |
| CVE-2016-2866 | 4.3 | Feb 8 | An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user Affected: 3.0.1; 4.0; 3.0.1.6; 4.0.1; 4.0.2; 4.0.3; +11 more |
| CVE-2016-6028 | 4.3 | Feb 1 | IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view Affected: 3.0.1; 4.0; 3.0.1.6; 4.0.1; 4.0.2; 4.0.3; +11 more |
| CVE-2016-2987 | 4.3 | Feb 1 | An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker Affected: 3.0.1; 4.0; 3.0.1.6; 4.0.1; 4.0.2; 4.0.3; +11 more |
Showing 17