CVE-2017-1609: Improper Neutralization of Input During Web Page Generation

IBM Quality Manager RQM 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2018-1603

IBM Rational Quality Manager is affected by CVE-2018-1603: cross-site scripting in RQM 5.0–5.02 and 6.0–6.0.6, enabling arbitrary JavaScript in the Web UI and potentially credential disclosure in a trusted session. The CVSS v3 base score is 5.4 (Medium), with network access, low attack complexity...

CVE-2018-1603

IBM Rational Quality Manager RQM 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1602

CVE-2018-1602 affects IBM Rational Quality Manager (RQM) 5.0–5.02 and 6.0–6.0.6. The vulnerability is a cross-site scripting flaw in the Web UI that could allow embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Exploitation details are not pro...

CVE-2018-1602

IBM Rational Quality Manager RQM 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1604

CVE-2018-1604 affects IBM Rational Quality Manager (RQM) 5.0–5.02 and 6.0–6.0.6, with a cross-site scripting (XSS) vulnerability in the Web UI that can allow embedding arbitrary JavaScript and potentially disclose credentials within a trusted session. Affected products/versions include Rational Q...

Cross site scripting

IBM Rational Quality Manager RQM 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Cross site scripting

IBM Rational Quality Manager RQM 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1602

IBM Rational Quality Manager RQM 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Cross site scripting

IBM Rational Quality Manager RQM 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1403

IBM Rational Quality Manager RQM 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Cross site scripting

IBM Rational Quality Manager RQM 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1395

CVE-2018-1395 affects IBM Rational Quality Manager (RQM) 5.0–5.0.2 and 6.0–6.0.6, with a cross-site scripting vulnerability in the Web UI that can allow embedding arbitrary JavaScript and potentially disclosure of credentials within a trusted session. Affected products/versions are listed in the ...

CVE-2018-1605

Summary : CVE-2018-1605 affects IBM Rational Quality Manager (RQM) 5.0–5.02 and 6.0–6.0.6, introducing a cross-site scripting (XSS) vulnerability in the Web UI that can lead to credentials disclosure within a trusted session. The root cause is input handling in the Web UI that allows embedding of...

CVE-2018-1522

CVE-2018-1522 affects IBM Rational Quality Manager (RQM) 5.0–5.02 and 6.0–6.0.6. The vulnerability is a cross‑site scripting flaw in the Web UI that lets an attacker inject arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Affected products include Rati...

CVE-2018-1439

Affected software: IBM Rational Quality Manager (RQM) 5.0–5.02 and 6.0–6.0.6. Vulnerability: Cross-site scripting in the Web UI that could allow embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Root cause/impact (as stated): Web UI XSS; affec...

CVE-2018-1404

The CVE-2018-1404 entry affects IBM Rational Quality Manager (RQM) versions 5.0–5.0.2 and 6.0–6.0.6. It is a cross-site scripting vulnerability in the Web UI that can let an attacker embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. The issue is d...

CVE-2018-1692

Vulnerability summary (CVE-2018-1692) IBM Rational Quality Manager (RQM) 5.0–5.0.2 and 6.0–6.0.6 is affected by a cross-site scripting (XSS) issue in the Web UI that can allow an attacker to embed arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. The IBM...

CVE-2018-1405

IBM Rational Quality Manager (RQM) is affected by a cross-site scripting vulnerability in versions 5.0–5.0.2 and 6.0–6.0.6. The issue allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Remediation/fix guidance from IBM: upg...

CVE-2018-1691

IBM Rational Quality Manager (RQM) versions 5.0–5.02 and 6.0–6.0.6 are affected by a cross-site scripting vulnerability that lets an attacker embed arbitrary JavaScript in the Web UI, potentially exposing credentials within a trusted session. Remediation is available via IBM fixes: for 6.0.x, upg...