Priority LOW 37
The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5 and 4.x before 4.0.7 iFix3 does not properly detect rec…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.01328 · Published 2015-03-18 · No fix listed CWE-399
Priority LOW 34
IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Quality Manager (RQM) 3.0.x bef…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00313 · Published 2018-03-15 · No fix listed CWE-264
Priority LOW 32
Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4; Rational Quality Manager (RQM) 3.x before 3.0.1.…
CVSS 3.0MEDIUM 6.8· Network · Low privileges · User interaction · EPSS 0.01178 · Published 2016-01-02 · No fix listed CWE-20
Priority LOW 31
XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote authenticated users…
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01231 · Published 2018-01-16 · No fix listed CWE-611
Priority LOW 29
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFi…
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00854 · Published 2018-03-15 · No fix listed CWE-79
Priority LOW 28
IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before…
CVSS 2.0MEDIUM 5.5· Network · Low privileges · Interaction — · EPSS 0.01374 · Published 2015-03-18 · No fix listed CWE-264
Priority LOW 26
IBM Rational DOORS Next Generation 5.0 through 5.0.2, 6.0 through 6.0.5 and IBM Rational Requirements Composer 5.0 through 5.0.2 are vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00968 · Published 2018-07-19 · No fix listed CWE-79
Priority LOW 26
IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0, and 6.0 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00702 · Published 2017-12-13 · No fix listed CWE-79
Priority LOW 26
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00729 · Published 2017-08-18 · No fix listed CWE-79
Priority LOW 26
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00869 · Published 2017-06-12 · No fix listed CWE-79
Priority LOW 26
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00729 · Published 2017-06-12 · No fix listed CWE-79
Priority LOW 26
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00729 · Published 2017-06-12 · No fix listed CWE-79
Priority LOW 26
IBM Jazz Team Server, as used in Rational Collaborative Lifecycle Management; Rational Quality Manager 3.x before 3.0.1.6 iFix 3, 4.x before 4.0.7, and 5.x before 5.0.1; and other Rational products, does not set the secu…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01667 · Published 2014-09-12 · No fix listed CWE-200
Priority LOW 25
IBM DOORS Next Generation (DNG/RRC) 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0054 · Published 2018-04-12 · No fix listed CWE-79
Priority LOW 25
IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00645 · Published 2017-02-08 · No fix listed CWE-79
Priority LOW 25
IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00645 · Published 2017-02-08 · No fix listed CWE-79
Priority LOW 25
IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00511 · Published 2017-02-23 · No fix listed CWE-79
Priority LOW 25
The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4.0 through 4.0.7 and 5.0 through 5.0.2,…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01186 · Published 2015-04-27 · No fix listed CWE-200
Priority LOW 25
IBM Rational Requirements Composer before 4.0.4 does not properly perform authentication, which has unspecified impact and remote attack vectors.
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00432 · Published 2013-09-12 · No fix listed CWE-287
Priority LOW 25
Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for remote attackers to discover credentials via unknown vectors.
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.00562 · Published 2013-09-12 · No fix listed CWE-255
Priority LOW 24
Open redirect vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4.x before 4.0.6, and Rational DOORS Next Generation 4.x before 4.0.6, allows remote authenticated users to redirect users to…
CVSS 2.0MEDIUM 4.9· Network · Low privileges · Interaction — · EPSS 0.00951 · Published 2014-03-04 · No fix listed CWE-20
Priority LOW 24
Open redirect vulnerability in IBM Rational Requirements Composer before 4.0.4 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
CVSS 2.0MEDIUM 4.9· Network · Low privileges · Interaction — · EPSS 0.00852 · Published 2013-09-12 · No fix listed CWE-20
Priority LOW 23
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFi…
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00634 · Published 2018-03-15 · No fix listed CWE-79
Priority LOW 22
IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further attacks against the system.
CVSS 3.0MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00941 · Published 2017-02-08 · No fix listed CWE-200
Priority LOW 22
IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01332 · Published 2015-03-18 · No fix listed CWE-200
Load more