CVE-2018-1440

IBM Rational Quality Manager RQM 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1557

CVE-2018-1557 affects IBM Rational Quality Manager (RQM) versions 5.0–5.02 and 6.0–6.0.6. The issue is a cross-site scripting vulnerability in the Web UI that could enable an attacker to inject JavaScript and potentially disclose credentials in a trusted session. Remediation per IBM: upgrade to 6...

CVE-2018-1440

CVE-2018-1440 affects IBM Rational Quality Manager (RQM) 5.0–5.02 and 6.0–6.0.6, where a cross-site scripting flaw in the Web UI could let an attacker embed arbitrary JavaScript, potentially disclosing credentials within a trusted session. Remediation per IBM includes upgrading to 5.0.2 iFix27 or...

CVE-2018-1601

IBM Rational Quality Manager (RQM) is affected by CVE-2018-1601. Affected products/versions include RQM 5.0–5.02 and 6.0–6.0.6, where the Web UI can be exploited via cross-site scripting to embed arbitrary JavaScript and potentially disclose credentials within a trusted session. Mitigation provid...

CVE-2018-1403

CVE-2018-1403 affects IBM Rational Quality Manager (RQM) versions 5.0–5.0.2 and 6.0–6.0.6. The issue is a cross-site scripting flaw in the Web UI that lets an attacker embed arbitrary JavaScript, potentially leading to credentials disclosure in a trusted session. Root cause: improper sanitization...

CVE-2017-1649

Vulnerability: CVE-2017-1649 affects IBM Rational Quality Manager (RQM) 5.0–5.0.2 and 6.0–6.0.6. Root cause: cross-site scripting in the Web UI that can embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Impact: credentials exposure within a sessio...

CVE-2018-1557

IBM Rational Quality Manager RQM 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Design/Logic Flaw

IBM Quality Manager RQM 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 126231...

CVE-2017-1329

IBM Quality Manager RQM 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 126231...

Design/Logic Flaw

IBM Quality Manager RQM 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124524...

CVE-2017-1242

IBM Quality Manager RQM 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124524...

CVE-2017-1248

IBM Quality Manager RQM 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124628...

CVE-2017-1238

IBM Quality Manager RQM 5.0.x and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2017-1248

IBM Quality Manager RQM 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124628...

CVE-2017-1329

IBM Quality Manager (RQM) is affected by an HTML injection vulnerability identified as CVE-2017-1329. Affected: Rational Quality Manager 5.0.x and 6.0–6.0.5; the issue allows remote HTML injection executed in the browser within the hosting site’s security context. Remediation: upgrade 6.0.x to 6....

CVE-2017-1248

CVE-2017-1248 affects IBM Rational Quality Manager (RQM) 5.0.x and 6.0–6.0.5, with an HTML injection flaw that could execute code in a user’s browser within the hosting site’s context. The IBM bulletin A27047ED73E7AE4D822B59EB4E55C43E9EF28F36E8CF4AFFCD62BFF92FCC5593 lists this CVE among multiple ...

CVE-2017-1242

IBM Security Bulletin confirms CVE-2017-1242 affects IBM Rational Quality Manager (RQM) in Rational CLM 5.0–5.0.2 and 6.0–6.0.5. The issue is an HTML injection that lets a remote attacker have HTML execute in a user’s browser in the hosting site’s context. Remediation: upgrade to RQM 6.0.4+ (or 6...

CVE-2017-1238

The CVE-2017-1238 entry concerns IBM Rational Quality Manager (RQM) versions 5.0.x and 6.0 up to 6.0.5, where the Web UI is vulnerable to cross-site scripting. The flaw allows embedding arbitrary JavaScript in the Web UI, potentially altering functionality and exposing credentials within a truste...

CVE-2017-1239

The CVE-2017-1239 issue affects IBM Rational Quality Manager (RQM) components in Rational CLM: 5.0.x and 6.0.x up to 6.0.5. The vulnerability allows sensitive information exposure via HTTP 500 Internal Server Error responses, as described in IBM’s Security Bulletin for RQM. Root cause details are...

CVE-2017-1248: Improper Control of Generation of Code

IBM Quality Manager RQM 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124628...