1082 matches found
CVE-2018-1826
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2018-1734
CVE-2018-1734 affects IBM Rational Collaborative Lifecycle Management (CLM) versions 6.0–6.0.6.1. The root cause is disclosure of sensitive information in error messages, which could enable a malicious user to orchestrate further attacks. Affected products include CLM components such as Rational ...
CVE-2018-1734
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information in error messages that may be used by a malicious user to orchestrate further attacks. IBM X-Force ID: 147838...
CVE-2018-1760
Affected software: IBM Rational CLM suite (including CLM, RQM, RTC, DOORS Next Gen, RSM, RSA DM) running 6.0 – 6.0.6.1. Vulnerability: Cross-site scripting in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Root cause ...
PT-2019-9669 · Ibm · Ibm Rational Collaborative Lifecycle Management
Name of the Vulnerable Software and Affected Versions: IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...
PT-2019-9571 · Ibm · Ibm Rational Collaborative Lifecycle Management
Name of the Vulnerable Software and Affected Versions: IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...
PT-2019-16992 · Ibm · Ibm Rational Collaborative Lifecycle Management
Name of the Vulnerable Software and Affected Versions: IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...
PT-2019-9455 · Ibm · Ibm Rational Collaborative Lifecycle Management
Name of the Vulnerable Software and Affected Versions: IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1 Description: The issue discloses sensitive information in error messages, which may be used by a malicious user to orchestrate further attacks. Recommendations: For...
PT-2019-9671 · Ibm · Ibm Rational Collaborative Lifecycle Management
Name of the Vulnerable Software and Affected Versions: IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...
PT-2019-9507 · Ibm · Ibm Rational Collaborative Lifecycle Management
Name of the Vulnerable Software and Affected Versions: IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...
Security Bulletin: Security vulnerability has been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2019-0221)
Summary Jazz Team Server is shipped as a component of Jazz Reporting Service JRS. Information about a security vulnerability affecting Jazz Team Server and Jazz-based products has been published in a security bulletin. Vulnerability Details CVEID: CVE-2019-0221 DESCRIPTION: Apache Tomcat is...
NOTICE-OF-CHANGE ANNOUNCEMENT FOR CITRIX SD-WAN 3000 WAN Optimization Edition
Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN 3000-WO 4x1000-Base-SX WAN Optimization Edition. The tables below explain the Citrix SD-WAN life cycle management milestones as well as important information regarding dates and options during this period. The dates an...
NOTICE-OF-CHANGE ANNOUNCEMENT FOR CITRIX SD-WAN 410 Standard Edition and 1000 Standard and Premium Edition
Note : Upgrade SKUs for these models will be available until the year before EOL Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN 410 Standard Edition, Citrix SD-WAN 1000 Standard and Premium Edition The tables below explain the Citrix SD-WAN life cycle management...
IBM Rational Collaborative Lifecycle Management Cross-Site Scripting Vulnerability
IBM Rational Collaborative Lifecycle Management CLM is a suite of collaborative lifecycle management solutions from IBM in the United States. The solution combines three products, RTC, RQM, and RRC, in a single IBM SmartCloud Enterprise cloud environment image to provide requirements management,...
CVE-2018-1658
IBM Jazz Foundation IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6 is vulnerable to HTTP header injection, caused by improper validation of input. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to inject arbitrar...
CVE-2018-1688
Summary (CVE-2018-1688) IBM Jazz Foundation, used by CLM 5.0–6.0.6, is vulnerable to cross-site scripting in the Web UI, potentially allowing a trusted-session credential disclosure. The issue affects multiple CLM-related products built on IBM Jazz technology. Remediation is available via upgrade...
CVE-2018-1658
IBM Jazz Foundation IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6 is vulnerable to HTTP header injection, caused by improper validation of input. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to inject arbitrar...
Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2018-1890, CVE-2018-12547, CVE-2019-2426, CVE-2018-11212)
Summary Jazz Team Server is shipped as a component of Jazz Reporting Service JRS. Information about multiple security vulnerabilities affecting Jazz Team Server and Jazz-based products has been published in a security bulletin. Vulnerability Details CVEID: CVE-2018-1890 DESCRIPTION: IBM SDK, Java...
The vulnerability of the Cisco Prime Network lifecycle management software allows a hacker to inject any HTML or JavaScript code into the loaded page.
The vulnerability of the Cisco Prime Network lifecycle management software is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to inject arbitrary HTML or JavaScript code into the uploaded page through a specially crafted link...
