Cross site scripting

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

Cross site scripting

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

Cross site scripting

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1277

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1250

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1608

CVE-2017-1608 is a cross-site scripting vulnerability affecting IBM Rational Quality Manager (RQM) and IBM Rational Collaborative Lifecycle Management (RCLM) versions 5.0–5.0.2 and 6.0–6.0.5. The root cause is improper handling of input in the Web UI that allows embedding arbitrary JavaScript, po...

CVE-2017-1316

Affected products/versions: IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management (RCLM) 5.0–5.0.2 and 6.0–6.0.5. Issue: cross-site scripting (XSS) in the Web UI enables embedding arbitrary JavaScript, potentially leading to credential disclosure within a trusted sess...

CVE-2017-1652

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1568

Summary: CVE-2017-1568 maps to an XSS vulnerability in IBM Rational Quality Manager (RQM) and Rational CLM, affecting 5.0–5.0.2 and 6.0–6.0.5. The issue arises in the Web UI, enabling an attacker to embed arbitrary JavaScript and potentially disclose credentials within a trusted session. Affected...

CVE-2017-1313

CVE-2017-1313 affects IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management, specifically versions 5.0–5.0.2 and 6.0–6.0.5. The issue is a cross-site scripting vulnerability in the Web UI that can allow an attacker to embed arbitrary JavaScript and potentially disclose ...

CVE-2017-1314

CVE-2017-1314 affects IBM Rational Quality Manager and Rational Collaborative Lifecycle Management versions 5.0–5.0.2 and 6.0–6.0.5. The Web UI is vulnerable to cross-site scripting (XSS) , enabling an attacker to embed arbitrary JavaScript that could lead to credentials disclosure within a trust...

CVE-2017-1715

CVE-2017-1715 describes a cross-site scripting vulnerability in IBM Rational Quality Manager (RQM) and IBM Rational Collaborative Lifecycle Management (RCLM) 5.0–5.0.2 and 6.0–6.0.5. The issue affects the Web UI and can allow an attacker to embed arbitrary JavaScript, potentially leading to crede...

CVE-2017-1293

CVE-2017-1293 affects IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management (RCLM) versions 5.0–5.0.2 and 6.0–6.0.5. The issue is a cross-site scripting vulnerability in the Web UI that can allow embedding arbitrary JavaScript, potentially leading to credentials discl...

CVE-2017-1621

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1316

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1299

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1306

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1280

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1312

CVE-2017-1312 affects IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management (RCLM) versions 5.0–5.0.2 and 6.0–6.0.5, via cross-site scripting in the Web UI that can lead to credentials disclosure within a trusted session. Root cause: reflected/stored XSS in the Web UI...

CVE-2017-1280

CVE-2017-1280 affects IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management (CLM) 5.0–5.0.2 and 6.0–6.0.5. The root cause is cross-site scripting in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted s...