4722 matches found
CVE-2017-1715
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
CVE-2017-1592
This CVE (CVE-2017-1592) affects IBM Rational Quality Manager (RQM) and IBM Rational Collaborative Lifecycle Management (RCLM). Affected versions are RCLM 5.0–5.0.2 and 6.0–6.0.5, and RQM 5.0–5.0.2 and 6.0–6.0.5. Root cause (per the sources) is cross-site scripting in the Web UI that permits embe...
CVE-2017-1314
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
CVE-2017-1651
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
CVE-2017-1313
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
CVE-2017-1275
CVE-2017-1275 affects IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management (RCLM) versions 5.0–5.0.2 and 6.0–6.0.5. The issue is a cross-site scripting vulnerability in the Web UI that could allow attackers to embed arbitrary JavaScript, potentially leading to creden...
CVE-2017-1293
CVE-2017-1293 affects IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management (RCLM) versions 5.0–5.0.2 and 6.0–6.0.5. The issue is a cross-site scripting vulnerability in the Web UI that can allow embedding arbitrary JavaScript, potentially leading to credentials discl...
CVE-2017-1564
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
CVE-2017-1316
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
CVE-2017-1568
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
CVE-2017-1281
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
CVE-2017-1275
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
CVE-2017-1621
CVE-2017-1621 affects IBM Rational Quality Manager and Rational Collaborative Lifecycle Management (RCLM) releases 5.0–5.0.2 and 6.0–6.0.5. The root cause is a cross-site scripting flaw in the Web UI that can allow embedding arbitrary JavaScript, potentially leading to credentials disclosure with...
CVE-2017-1293
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...
CVE-2017-1561
CVE-2017-1561 is a cross‑site scripting vulnerability affecting IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management. Technical details in connected docs show the issue exists in RQM/RCLM versions 5.0–5.0.2 and 6.0–6.0.5, enabling an attacker to inject JavaScript in th...
CVE-2017-1562
CVE-2017-1562 is a cross-site scripting vulnerability in IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management (RCLM). According to connected IBM security disclosures, affected versions are RCLM 5.0–6.0.5 and RQM 5.0–5.0.2 and 6.0–6.0.5. The vulnerability allows embed...
CVE-2017-1652
CVE-2017-1652 affects IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management, with cross-site scripting in the Web UI in RQM/CLM versions 5.0–5.0.2 and 6.0–6.0.5. The root cause is improper handling of user-supplied input in the web interface, enabling an attacker to emb...
CVE-2017-1280
CVE-2017-1280 affects IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management (CLM) 5.0–5.0.2 and 6.0–6.0.5. The root cause is cross-site scripting in the Web UI that allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted s...
CVE-2017-1608
CVE-2017-1608 is a cross-site scripting vulnerability affecting IBM Rational Quality Manager (RQM) and IBM Rational Collaborative Lifecycle Management (RCLM) versions 5.0–5.0.2 and 6.0–6.0.5. The root cause is improper handling of input in the Web UI that allows embedding arbitrary JavaScript, po...
CVE-2017-1280
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...