Xxe

2018-04-2021:29:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.2%

JSON

Multiple XML external entity (XXE) vulnerabilities in (1) CQWeb / CM Server, (2) ClearQuest Native client, (3) ClearQuest Eclipse client, and (4) ClearQuest Eclipse Designer components in IBM Rational ClearQuest 7.1.1 through 7.1.1.9, 7.1.2 through 7.1.2.13, 8.0.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92623.

CPENameOperatorVersion
rational_clearquestge7.1.1
rational_clearquestle7.1.1.9
rational_clearquestge7.1.2
rational_clearquestle7.1.2.13
rational_clearquestge8.0.0
rational_clearquestle8.0.0.10
rational_clearquestge8.0.1
rational_clearquestle8.0.1.3

Name	Operator	Version
rational_clearquest	ge	7.1.1
rational_clearquest	le	7.1.1.9
rational_clearquest	ge	7.1.2
rational_clearquest	le	7.1.2.13
rational_clearquest	ge	8.0.0
rational_clearquest	le	8.0.0.10
rational_clearquest	ge	8.0.1
rational_clearquest	le	8.0.1.3