CVE-2017-1725

CVE-2017-1725 is an undisclosed information-disclosure vulnerability affecting IBM Jazz Team Server and multiple IBM Rational products based on Jazz technology (including CLM, RDNG, RELM, RTC, RQM, Rhapsody DM, RSA DM). The IBM security bulletin consolidates affected versions across CLM/RQM/RTC/R...

CVE-2017-1734

IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management CLM, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manager RELM, Rational Team Concert RTC, Rational Quality Manager RQM, Rational Rhapsody Design Manager Rhapsody DM, and...

CVE-2017-1700: Incorrect Authorization

IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management CLM, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manager RELM, Rational Team Concert RTC, Rational Quality Manager RQM, Rational Rhapsody Design Manager Rhapsody DM, and...

CVE-2018-2572

CVE-2018-2572 maps to Oracle Agile PLM for Process (subcomponent Installation) affecting versions 6.1.1.6, 6.2.0.0, and 6.2.1.0. The vulnerability allows unauthenticated attackers to access Oracle Agile PLM data over HTTP with network access; exploitation requires user interaction, and impacts ma...

CVE-2018-2572

Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite subcomponent: Installation. Supported versions that are affected are 6.1.1.6, 6.2.0.0 and 6.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

CVE-2018-2572

Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite subcomponent: Installation. Supported versions that are affected are 6.1.1.6, 6.2.0.0 and 6.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

PT-2018-15622

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process versions 6.1.1.6, 6.2.0.0, and 6.2.1.0 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for...

CVE-2018-2572: Undefined Security Weakness

Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite subcomponent: Installation. Supported versions that are affected are 6.1.1.6, 6.2.0.0 and 6.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

Unspecified Vulnerability in Oracle Supply Chain Products Suite (CNVD-2018-09089)

Oracle Supply Chain Products Suite is a supply chain solution from Oracle, which provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Agile Product Lifecycle Management PLM for Process is one of the lifecycle management components. A security vulnerabili...

IBM Rational Collaborative Lifecycle Management Jazz Foundation Cross-Site Scripting Vulnerability (CNVD-2018-06382)

IBM Rational Collaborative Lifecycle Management CLM is a suite of collaborative lifecycle management solutions from IBM in the United States. The solution combines RTC, RQM, and RRC products in an IBM SmartCloud Enterprise cloud environment image to provide requirements management, change and...

IBM Rational Collaborative Lifecycle Management Jazz Foundation Information Disclosure Vulnerability

IBM Rational Collaborative Lifecycle Management CLM is a suite of collaborative lifecycle management solutions from IBM in the United States. The solution combines RTC, RQM, and RRC products in an IBM SmartCloud Enterprise cloud environment image to provide requirements management, change and...

IBM Rational Collaborative Lifecycle Management Jazz Foundation Cross-Site Scripting Vulnerability (CNVD-2018-06381)

IBM Rational Collaborative Lifecycle Management CLM is a suite of collaborative lifecycle management solutions from IBM in the United States. The solution combines RTC, RQM, and RRC products in an IBM SmartCloud Enterprise cloud environment image to provide requirements management, change and...

CVE-2017-1524

IBM Jazz Foundation IBM Rational Collaborative Lifecycle Management 5.0 and 6.0 could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970...

CVE-2017-1655

IBM Jazz Foundation IBM Rational Collaborative Lifecycle Management 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

Code injection

IBM RSA DM IBM Rational Collaborative Lifecycle Management 5.0 and 6.0 could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625...

Cross site scripting

IBM Jazz Foundation IBM Rational Collaborative Lifecycle Management 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

Cross site scripting

IBM Jazz Foundation IBM Rational Collaborative Lifecycle Management 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2017-1524

CVE-2017-1524 affects IBM Jazz Foundation (part of IBM Rational CLM 5.0/6.0). An authenticated user could obtain sensitive information from a specially crafted HTTP request, potentially aiding future attacks. The issue is documented with a CVSS v3 base score of 4.3 (Network, Low UI, Privileges Lo...

CVE-2017-1602

Summary of CVE-2017-1602 (IBM RSA DM/CLM) : IBM Rational Collaborative Lifecycle Management (CLM) 5.0–6.0.5 is affected by an unauthenticated exposure vulnerability in RSA DM where an authenticated user can access settings they should not be able to via a specially crafted URL. The NVD entry assi...

CVE-2017-1655

Consolidated for CVE-2017-1655: IBM Jazz Foundation (IBM Rational CLM 5.0/6.0) contains a cross-site scripting vulnerability in the Web UI that could allow an attacker to inject arbitrary JavaScript and potentially disclose credentials in a trusted session. The IBM Security Bulletin lists affecte...