CVE-2016-2947: Exposure of Sensitive Information to an Unauthorized Actor

IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2...

PT-2016-5278

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 4.0 through 4.0.7 before iFix11 IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.0.2 before iFix19 IBM Rational Collaborative Lifecycle Management versions 6.0...

PT-2016-5293

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 4.0 through 4.0.7 before iFix11 IBM Rational Collaborative Lifecycle Management versions 5.0 through 5.0.2 before iFix18 IBM Rational Collaborative Lifecycle Management versions 6.0...

CVE-2016-2864

Cross-site scripting XSS vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0...

CVE-2016-0372

IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert...

CVE-2016-2864

Summary: CVE-2016-2864 is a cross-site scripting (XSS) vulnerability affecting multiple IBM Jazz-based products (CLM, RQM, RTC, RDNG, RELM, Rhapsody DM, RSA DM) with affected versions ranging from CLM 3.0.1.6 to 6.0.x. The root cause is improper validation of user-supplied input, allowing remote ...

CVE-2016-0284: Improper Restriction of XML External Entity Reference

The XML parser in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Ration...

CVE-2016-0325: Improper Neutralization of Special Elements used in an OS Command

IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert...

CVE-2016-0273: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0...

CVE-2016-0285: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0...

PT-2016-4128

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 3.0.1.6 through 3.0.1.6 before iFix8 IBM Rational Collaborative Lifecycle Management versions 4.0 through 4.0.7 before iFix11 IBM Rational Collaborative Lifecycle Management versions 5.0...

PT-2016-4148

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management versions 3.0.1.6 through 6.0 before 6.0.2 iFix5 Rational Quality Manager versions 3.0.1.6 through 6.0 before 6.0.2 iFix5 Rational Team Concert versions 3.0.1.6 through 6.0 before 6.0.2 iFix5...

Multiple IBM Rational Products Cross-Site Scripting Vulnerabilities

IBM Rational Team Concert and Rational Collaborative Lifecycle Management are collaborative lifecycle management solutions from IBM USA.IBM Rational DOORS Next Generation RDNG is a requirements management solution from IBM USA. IBM Rational Engineering Lifecycle Manager is a suite of engineering...

Cross site scripting

Cross-site scripting XSS vulnerability in InfoSphere Data Architect IDA, as distributed in IBM Rational Software Architect 8.5 through 9.5, Rational Software Architect for WebSphere Software RSA4WS 8.5 through 9.5, and Rational Software Architect RealTime RSART 8.5 through 9.5, allows remote...

CVE-2015-7439

Cross-site scripting XSS vulnerability in InfoSphere Data Architect IDA, as distributed in IBM Rational Software Architect 8.5 through 9.5, Rational Software Architect for WebSphere Software RSA4WS 8.5 through 9.5, and Rational Software Architect RealTime RSART 8.5 through 9.5, allows remote...

CVE-2015-7439

CVE-2015-7439 is an IBM InfoSphere Data Architect (IDA) XSS vulnerability described across connected IBM advisories. The issue arises from improper validation of user-supplied input, allowing a remote attacker to inject arbitrary script or HTML by following a crafted URL. Affected products includ...

CVE-2015-7439: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in InfoSphere Data Architect IDA, as distributed in IBM Rational Software Architect 8.5 through 9.5, Rational Software Architect for WebSphere Software RSA4WS 8.5 through 9.5, and Rational Software Architect RealTime RSART 8.5 through 9.5, allows remote...

PT-2016-3779

Name of the Vulnerable Software and Affected Versions IBM Rational Software Architect versions 8.5 through 9.5 IBM Rational Software Architect for WebSphere Software RSA4WS versions 8.5 through 9.5 IBM Rational Software Architect RealTime RSART versions 8.5 through 9.5 Description The issue is a...

CVE-2015-4946

Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management CLM 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager RQM 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x...

CVE-2015-4946

CVE-2015-4946 affects IBM CLM/Jazz-based products (RCLM, RQM, RTC, RRC, RDNG, RELM, Rhapsody DM, RSA DM) and related Jazz Team Server components. The issue allows an authenticated user to bypass access restrictions and perform unauthorized actions due to a design/logic flaw in IBM Rational LifeCy...