CVE-2017-1717

The CVE-2017-1717 entry involves IBM Rational Quality Manager and Rational Collaborative Lifecycle Management (versions 5.0–5.0.2 and 6.0–6.0.5) suffering a cross-site scripting (XSS) vulnerability in the Web UI that can allow embedding arbitrary JavaScript and potentially disclose credentials wi...

CVE-2017-1277

CVE-2017-1277 affects IBM Rational Quality Manager (RQM) and IBM Rational Collaborative Lifecycle Management (RCLM) versions 5.0–5.0.2 and 6.0–6.0.5. The vulnerability is a cross-site scripting flaw that lets an attacker embed arbitrary JavaScript in the Web UI, potentially leading to credential ...

CVE-2017-1299

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1592

This CVE (CVE-2017-1592) affects IBM Rational Quality Manager (RQM) and IBM Rational Collaborative Lifecycle Management (RCLM). Affected versions are RCLM 5.0–5.0.2 and 6.0–6.0.5, and RQM 5.0–5.0.2 and 6.0–6.0.5. Root cause (per the sources) is cross-site scripting in the Web UI that permits embe...

CVE-2017-1280

CVE-2017-1280 affects IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management (CLM) 5.0–5.0.2 and 6.0–6.0.5. The root cause is cross-site scripting in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted s...

CVE-2017-1565

CVE-2017-1565 affects IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management (RCLM) versions 5.0–5.0.2 and 6.0–6.0.5. The vulnerability is a cross-site scripting flaw in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to crede...

CVE-2017-1690

IBM Rational Quality Manager and Rational Collaborative Lifecycle Management are affected by a cross-site scripting (XSS) vulnerability in the Web UI for versions 5.0–5.0.2 and 6.0–6.0.5. The issue can allow embedding arbitrary JavaScript, potentially leading to credential disclosure within a tru...

CVE-2017-1608

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1690

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1561

CVE-2017-1561 is a cross‑site scripting vulnerability affecting IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management. Technical details in connected docs show the issue exists in RQM/RCLM versions 5.0–5.0.2 and 6.0–6.0.5, enabling an attacker to inject JavaScript in th...

CVE-2017-1250

CVE-2017-1250 is an XSS vulnerability in IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management (RCLM) affecting RQM/RCLM versions 5.0–5.0.2 and 6.0–6.0.5. The issue allows embedding arbitrary JavaScript in the Web UI, potentially leading to credential disclosure withi...

CVE-2017-1715

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1564

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1621

CVE-2017-1621 affects IBM Rational Quality Manager and Rational Collaborative Lifecycle Management (RCLM) releases 5.0–5.0.2 and 6.0–6.0.5. The root cause is a cross-site scripting flaw in the Web UI that can allow embedding arbitrary JavaScript, potentially leading to credentials disclosure with...

CVE-2017-1312

CVE-2017-1312 affects IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management (RCLM) versions 5.0–5.0.2 and 6.0–6.0.5, via cross-site scripting in the Web UI that can lead to credentials disclosure within a trusted session. Root cause: reflected/stored XSS in the Web UI...

CVE-2017-1651

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1275

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1306

CVE-2017-1306 affects IBM Rational Quality Manager (RQM) and IBM Rational Collaborative Lifecycle Management (RCLM) versions 5.0–5.0.2 and 6.0–6.0.5, where the Web UI is vulnerable to cross-site scripting (XSS) that could lead to credentials disclosure within a trusted session. The vulnerability ...

CVE-2017-1281

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

CVE-2017-1691

IBM Rational Quality Manager and Rational Collaborative Lifecycle Management versions 5.0–5.0.2 and 6.0–6.0.5 are affected by a cross-site scripting (XSS) vulnerability in the Web UI that can lead to credentials disclosure within a trusted session. Root cause is not explicitly detailed in the pro...