Priority LOW 26
IBM Rational DOORS Next Generation 5.0 through 5.0.2, 6.0 through 6.0.5 and IBM Rational Requirements Composer 5.0 through 5.0.2 are vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00968 · Published 2018-07-19 · No fix listed CWE-79
Priority LOW 25
IBM DOORS Next Generation (DNG/RRC) 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0054 · Published 2018-04-12 · No fix listed CWE-79
Priority LOW 15
IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Quality Manager (RQM) 4.0.x before 4.0.7 iFix10, 5.0.…
CVSS 3.0LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00128 · Published 2018-03-20 · No fix listed CWE-200
Priority LOW 23
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFi…
CVSS 3.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00634 · Published 2018-03-15 · No fix listed CWE-79
Priority LOW 29
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFi…
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00854 · Published 2018-03-15 · No fix listed CWE-79
Priority LOW 34
IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Quality Manager (RQM) 3.0.x bef…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00313 · Published 2018-03-15 · No fix listed CWE-264
Priority LOW 31
XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote authenticated users…
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01231 · Published 2018-01-16 · No fix listed CWE-611
Priority LOW 26
IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0, and 6.0 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00702 · Published 2017-12-13 · No fix listed CWE-79
Priority LOW 26
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00729 · Published 2017-08-18 · No fix listed CWE-79
Priority LOW 26
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00869 · Published 2017-06-12 · No fix listed CWE-79
Priority LOW 26
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00729 · Published 2017-06-12 · No fix listed CWE-79
Priority LOW 26
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00729 · Published 2017-06-12 · No fix listed CWE-79
Priority LOW 25
IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00511 · Published 2017-02-23 · No fix listed CWE-79
Priority LOW 21
An undisclosed vulnerability in IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 could allow a JazzGuest user to see project names.
CVSS 3.0MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00683 · Published 2017-02-15 · No fix listed CWE-200
Priority LOW 25
IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00645 · Published 2017-02-08 · No fix listed CWE-79
Priority LOW 25
IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00645 · Published 2017-02-08 · No fix listed CWE-79
Priority LOW 22
IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sensitive information in error response messages that could be used for further attacks against the system.
CVSS 3.0MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00941 · Published 2017-02-08 · No fix listed CWE-200
Priority LOW 17
Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager (RQM) 3.x before 3.0.1.6 IF7…
CVSS 3.0LOW 3.5· Adjacent network · Low privileges · No interaction · EPSS 0.00454 · Published 2016-01-03 · No fix listed CWE-200
Priority LOW 16
Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager (R…
CVSS 3.0LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00303 · Published 2016-01-03 · No fix listed CWE-264
Priority LOW 21
Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Quality Manager (RQM) 2.x and 3.x…
CVSS 3.0MEDIUM 4.3· Adjacent network · No auth · No interaction · EPSS 0.00545 · Published 2016-01-03 · No fix listed
Priority LOW 32
Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4; Rational Quality Manager (RQM) 3.x before 3.0.1.…
CVSS 3.0MEDIUM 6.8· Network · Low privileges · User interaction · EPSS 0.01178 · Published 2016-01-02 · No fix listed CWE-20
Priority LOW 18
Cross-site scripting (XSS) vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Quality Manager (RQM) 4.x b…
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.00767 · Published 2015-07-20 · No fix listed CWE-79
Priority LOW 21
Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Quality Manager (RQM) 2.0 through 2.0.1, 3.0 through 3.0.1.6, 4…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.0102 · Published 2015-06-07 · No fix listed
Priority LOW 18
IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and 5.0 through 5.0.2, when LTPA single sign on is used with WebSphere Application…
CVSS 2.0LOW 3.7· Local · No auth · Interaction — · EPSS 0.00436 · Published 2015-05-30 · No fix listed
Priority LOW 25
The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4.0 through 4.0.7 and 5.0 through 5.0.2,…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01186 · Published 2015-04-27 · No fix listed CWE-200
Load more