IBM

Records9712All Threatist records

Exploited (KEV)11In CISA KEV

CVSS critical986CVSS 9.0–10.0

CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

TI-2026-08085 IBM Langflow Code Injection Vulnerability CRITICAL 100KEV 2026-08-04 TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability CRITICAL 100KEV 2023-02-21 TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability CRITICAL 88KEV 2022-05-25 TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records

Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

19 records in Rational Clearcase · all components

TI-2019-03039 CVE-2019-4059 · GHSA-xq3v-7jhc-8vq7

Insufficiently protected credentials in IBM Rational ClearCase

MEDIUM 45

IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01693 Published 2019-02-15 No fix listed CWE-522

TI-2014-05124 CVE-2014-6221 · GHSA-q86j-485g-vc49

The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x…

MEDIUM 45

The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier f…

CVSS 2.0HIGH 9.4 Network No auth Interaction — EPSS 0.02685 Published 2015-04-06 No fix listed CWE-310

TI-2014-00857 CVE-2014-0931 · GHSA-f2rh-8rx8-q57q

Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM…

MEDIUM 44

Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM Server, (2) Perl CC/CQ integration trigger scripts, (3) CMAPI Java interface, (4) ClearCase remote client, and (5) CMI and OSLC-based Cle…

CVSS 3.0CRITICAL 9.1 Network No auth No interaction EPSS 0.02679 Published 2018-04-20 No fix listed CWE-611

TI-2015-04226 CVE-2015-5039 · GHSA-wr3c-hrxx-6gqh

The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x…

LOW 35

The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly validate hostnames in X.509 certificates from SSL servers, which…

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.01145 Published 2018-03-26 No fix listed CWE-310

TI-2014-00764 CVE-2014-0829 · GHSA-w378-hh4x-qc49

Multiple buffer overflows in IBM Rational ClearCase 7.x before 7.1.2.13, 8.0.0.x before…

LOW 32

Multiple buffer overflows in IBM Rational ClearCase 7.x before 7.1.2.13, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8.0.1.3 allow remote authenticated users to obtain privileged access via unspecified vectors.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01446 Published 2014-03-21 No fix listed CWE-119

TI-2013-04623 CVE-2013-5416 · GHSA-qgg3-wgfr-9xjq

Unspecified vulnerability in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before…

LOW 32

Unspecified vulnerability in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows local users to gain privileges via unknown vectors.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00323 Published 2013-12-18 No fix listed

TI-2013-04622 CVE-2013-5415 · GHSA-wqf9-7q5f-3m2f

Buffer overflow in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and…

LOW 32

Buffer overflow in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows local users to gain privileges via unspecified vectors.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00349 Published 2013-12-18 No fix listed CWE-119

TI-2011-01054 CVE-2011-1205 · GHSA-47w3-v9wp-56q9

Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0…

LOW 31

Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1.4, ClearQuest 7.0.0.4 through 7.1.1.4, and other products allow local…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00372 Published 2011-03-29 No fix listed CWE-119

TI-2013-04590 CVE-2013-5373 · GHSA-jwcq-7v6p-m9w6

The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and…

LOW 30

The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which allows local users to gain privileges by appending commands.

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00304 Published 2013-09-25 No fix listed CWE-264

TI-2014-02484 CVE-2014-3106 · GHSA-79gj-6h44-rvgj

IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before…

LOW 27

IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to bypass authentication…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0185 Published 2014-09-23 No fix listed CWE-287

TI-2014-02479 CVE-2014-3101 · GHSA-rxhx-g8q9-v24x

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0…

LOW 27

The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02144 Published 2014-09-23 No fix listed CWE-287

TI-2014-02469 CVE-2014-3090 · GHSA-g6x3-992w-85wr

IBM Rational ClearCase 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before…

LOW 27

IBM Rational ClearCase 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number o…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02374 Published 2014-09-23 No fix listed

TI-2014-02483 CVE-2014-3105 · GHSA-p9xp-4qhh-8rv8

The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before…

LOW 26

The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 provides different error messages for failed login attempts depending on w…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01667 Published 2014-09-23 No fix listed CWE-200

TI-2014-02482 CVE-2014-3104 · GHSA-w3qg-grm5-jw49

IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before…

LOW 26

IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01731 Published 2014-09-23 No fix listed CWE-399

TI-2014-02481 CVE-2014-3103 · GHSA-6v82-rqfh-g76c

The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12…

LOW 26

The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes it easier for remote…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01667 Published 2014-09-23 No fix listed CWE-200

TI-2009-04120 CVE-2009-4357 · GHSA-gxrr-7663-gg4f

CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly…

LOW 25

CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecifi…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01076 Published 2009-12-18 No fix listed CWE-200

TI-2013-04629 CVE-2013-5422 · GHSA-g2pj-c34g-2wxj

The Web Client in IBM Rational ClearQuest 7.1 through 7.1.2.12, 8.0.0.x before 8.0.0.9…

LOW 22

The Web Client in IBM Rational ClearQuest 7.1 through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2, when a multi-database dataset exists, allows remote attackers to read database names via unspecified vec…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01191 Published 2013-12-19 No fix listed CWE-200

TI-2009-01227 CVE-2009-1292 · GHSA-8h23-pp7x-2pww

UCM-CQ in IBM Rational ClearCase 7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, and…

LOW 11

UCM-CQ in IBM Rational ClearCase 7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, and 7.1.x before 7.1.0.1 on Linux and AIX places a username and password on the command line, which allows local users to obtain credential…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00367 Published 2009-04-14 No fix listed CWE-200

TI-2014-05057 CVE-2014-6134 · GHSA-9pf4-6pr2-9j32

IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation…

LOW 8

IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which mig…

CVSS 2.0LOW 1.2 Local No auth Interaction — EPSS 0.00332 Published 2015-03-25 No fix listed CWE-200

Open these records in search →

Critical	986
High	2776
Medium	5270
Low	679
No CVSS	1