Security Bulletin: Vulnerabilities in Rational DOORS Next Generation with potential for Cross-Site Scripting and HTML Injection attacks

Summary Undisclosed security vulnerabilities in IBM Rational DOORS Next Generation and Rational Requirements Composer may result in Cross-Site Scripting and HTML Injection attacks CVE-2017-1247, CVE-2017-1276, CVE-2017-1278 . Vulnerability Details CVEID: CVE-2017-1247 DESCRIPTION: IBM DOORS Next...

Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Javascript Injection Attack (CVE-2017-1305)

Summary An undisclosed security vulnerability in IBM Rational DOORS Next Generation may allow a JavaScript Injection attack Vulnerability Details CVEID: CVE-2017-1305 DESCRIPTION: IBM DOORS Next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational DOORS Web Access

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 6 and 7, which are used by IBM Rational DOORS Web Access. These issues were disclosed as part of the IBM Java SDK updates in January 2017. Vulnerability Details Rational DOORS Web Access is affected by the...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational DOORS Web Access (CVE-2016-5597)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 6.0.16.30 and Version 7.0.9.50 that are used by IBM Rational DOORS Web Access. These issues were disclosed as part of the IBM Java SDK updates in October 2016. Vulnerability Details Rational DOORS Web Access is...

Security Bulletin: Multiple Vulnerabilities in Oracle Outside In Technology affect IBM Rational DOORS Next Generation

Summary IBM Rational DOORS Next Generation® is affected by multiple vulnerabilities in the Oracle Outside In Technology® that is used as a component. Vulnerability Details CVEID: CVE-2017-3266 DESCRIPTION: An unspecified vulnerability in Oracle Fusion Middleware related to the Outside In Filters...

Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting attack (CVE-2017-1127, CVE-2017-1128)

Summary Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting attack. Vulnerability Details CVEID: CVE-2017-1127 DESCRIPTION: IBM DOORS Next Generation DNG/RRC is vulnerable to cross-site scripting. This vulnerability allows users to embed...

Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting attack (CVE-2016-6055)

Summary Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting attack. Vulnerability Details CVEID: CVE-2016-6055 DESCRIPTION: IBM Rational DOORS Next Generation is vulnerable to cross-site scripting. This vulnerability allows users to embed...

Security Bulletin: Undisclosed Vulnerability in Rational DOORS Next Generation could allow a JazzGuest user to see project area names without permissions to see them (CVE-2016-6060)

Summary Security Bulletin: Undisclosed Vulnerability in Rational DOORS Next Generation could allow a JazzGuest user to see project area names without permissions to see them. Vulnerability Details CVEID: CVE-2016-6060 DESCRIPTION: An undisclosed vulnerability in IBM Rational DOORS Next Generation...

Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for attacks by displaying improper handling of errors (CVE-2016-9748)

Summary An undisclosed security vulnerability of Rational DOORS Next Generation may result in an attack by revealing implementations details, internal error messages, database dumps or error codes. Vulnerability Details CVEID: CVE-2016-9748 DESCRIPTION: IBM RM discloses sensitive information in...

Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting attack (CVE-2016-5955)

Summary Security Bulletin: Vulnerability in Rational DOORS Next Generation with potential for Cross-Site Scripting attack. Vulnerability Details CVE ID: CVE-2016-5955 DESCRIPTION: IBM DOORS Next Generation DNG/RRC is vulnerable to an undisclosed cross-site scripting attack. This vulnerability...

Security Bulletin: Multiple Vulnerabilities in Oracle Outside In Technology affect IBM Rational DOORS Next Generation (CVE-2016-3574, CVE-2016-3575, etc)

Summary IBM Rational DOORS Next Generation® is affected by multiple vulnerabilities in the Oracle Outside In Technology® that is used as a component. Vulnerability Details CVEID: CVE-2016-3574 DESCRIPTION: An unspecified vulnerability in Oracle Fusion Middleware related to the Outside In Technolo...

Security Bulletin: Vulnerability in Oracle Outside In Technology affects IBM Rational DOORS Next Generation (CVE-2016-3455)

Summary IBM Rational DOORS Next Generation® is affected by a vulnerability in the Oracle Outside In Technology® that is used as a component. Vulnerability Details CVE-ID: CVE-2016-3455 Description: An unspecified vulnerability in Oracle Fusion Middleware related to the Outside In Technology Outsi...

Security Bulletin: Vulnerability in Rational DOORS Next Generation and Rational Requirements Composer with potential for Cross Site Scripting attack (CVE-2016-0243)

Summary An undisclosed security vulnerability of IBM Rational DOORS Next Generation and Rational Requirements Composer may result in a Cross Site Scripting attack. Vulnerability Details CVEID: CVE-2016-0243 Description: IBM Active Content Filtering is vulnerable to cross-site scripting, caused by...

Security Bulletin: Multiple Vulnerabilities in Oracle Outside In Technology affects IBM Rational DOORS Next Generation

Summary IBM Rational DOORS Next Generation® is affected by a vulnerability in the Oracle Outside In Technology® that is used as a component. Vulnerability Details CVE-ID: CVE-2015-4808 Description: An unspecified vulnerability in the Oracle Outside In Technology Outside In Filters component could...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Rational DOORS Web Access (CVE-2016-0475, CVE-2016-0466, CVE-2016-0448, CVE-2015-4872, CVE-2015-7575)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6 and Version 7, which are used by IBM Rational DOORS Web Access. These issues were disclosed as part of the IBM Java SDK updates in October 2015 and January 2016 and includes the vulnerabilit...

Security Bulletin: Vulnerability in Oracle Outside In Technology affects IBM Rational DOORS Next Generation (CVE-2015-4877, CVE-2015-4878)

Summary IBM Rational DOORS Next Generation® is affected by a vulnerability in the Oracle Outside In Technology® that is used as a component. Vulnerability Details CVE-ID: CVE-2015-4877 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters...

Security Bulletin: Vulnerability in Apache Commons affects Rational DOORS Web Access (CVE-2015-7450)

Summary An Apache Commons Collections vulnerability for handling Java object deserialization was addressed by the Apache Software Foundation. Vulnerability Details IBM Rational DOORS Web Access is affected by the following vulnerability: CVEID: CVE-2015-7450 DESCRIPTION: Apache Commons Collection...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects Rational DOORS Web Access (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM Rational DOORS Web Access. Vulnerability Details Rational DOORS Web Access is affected by the following vulnerability: CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote...

Multiple IBM Products Jazz Team Server Information Disclosure Vulnerability

IBM Rational Collaborative Lifecycle Management CLM and others are products of IBM Corporation in the U.S. IBM Rational Collaborative Lifecycle Management is a set of collaborative lifecycle management solutions.Rational Rational Collaborative Lifecycle Management CLM is a collaborative lifecycle...

Multiple IBM Products Jazz Team Server Information Disclosure Vulnerability (CNVD-2018-09167)

IBM Rational Collaborative Lifecycle Management CLM and others are products of IBM Corporation in the U.S. IBM Rational Collaborative Lifecycle Management is a set of collaborative lifecycle management solutions.Rational Rational Collaborative Lifecycle Management CLM is a collaborative lifecycle...