CVE-2015-4939: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Emptoris Supplier Lifecycle Management and Emptoris Program Management 10.x before 10.0.1.4iFix3, 10.0.2.x before 10.0.2.7iFix1, 10.0.3.x before 10.0.3.2, and 10.0.4.x before 10.0.4.0iFix1 allows remote attackers to inject arbitrary web script or HTML...

Unspecified Vulnerability in Oracle Supply Chain Products Suite Agile PLM Framework Component

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle that provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Agile PLM Framework is one of the product lifecycle management PLM components. Oracle Agile PLM Framework is one...

Cross site scripting

Cross-site scripting XSS vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Quality Manager RQM 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Team Concert RTC 4.x before 4.0....

CVE-2015-0130

Cross-site scripting XSS vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Quality Manager RQM 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Team Concert RTC 4.x before 4.0....

Unspecified Vulnerability in Oracle Supply Chain Oracle Agile PLM Component (CNVD-2015-04830)

Oracle Agile Product Lifecycle Management PLM solutions enable organizations to accelerate product innovation and maximize product profitability by enabling them to manage product information, processes, and decisions throughout the product lifecycle across a global product network. A security...

Unspecified Vulnerability in Oracle Supply Chain Oracle Agile Product Lifecycle Management for Process Component

Oracle Agile Product Lifecycle Management PLM solutions enable organizations to accelerate product innovation and maximize product profitability by enabling them to manage product information, processes, and decisions throughout the product lifecycle across a global product network. A security...

PT-2015-4491

Name of the Vulnerable Software and Affected Versions IBM Rational Collaborative Lifecycle Management CLM versions 4.x through 4.0.7 IF5 and 5.x through 5.0.2 IF4 Rational Quality Manager RQM versions 4.x through 4.0.7 IF5 and 5.x through 5.0.2 IF4 Rational Team Concert RTC versions 4.x through...

CVE-2015-0130: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Quality Manager RQM 4.x before 4.0.7 IF6 and 5.x before 5.0.2 IF5; Rational Team Concert RTC 4.x before 4.0....

CVE-2015-4746

Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.0.0.7, 6.1.0.3, 6.1.1.5, and 6.2.0.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Global Spec Management...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.0.0.7, 6.1.0.3, 6.1.1.5, and 6.2.0.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Global Spec Management...

CVE-2015-4746

Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.0.0.7, 6.1.0.3, 6.1.1.5, and 6.2.0.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Global Spec Management...

CVE-2015-4746

The CVE-2015-4746 entry concerns Oracle Supply Chain: Oracle Agile Product Lifecycle Management for Process component versions 6.0.0.7, 6.1.0.3, 6.1.1.5, and 6.2.0.0. It describes an unspecified vulnerability that allows remote authenticated users to affect confidentiality via unknown vectors rel...

PT-2015-6688

Name of the Vulnerable Software and Affected Versions Oracle Agile Product Lifecycle Management for Process versions 6.0.0.7, 6.1.0.3, 6.1.1.5, and 6.2.0.0 Description The issue affects confidentiality and can be exploited by remote authenticated users via unknown vectors related to Global Spec...

CVE-2015-4746: Undefined Security Weakness

Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.0.0.7, 6.1.0.3, 6.1.1.5, and 6.2.0.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Global Spec Management...

CVE-2015-0112

Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 3.0.1, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Quality Manager RQM 2.0 through 2.0.1, 3.0 through 3.0.1.6, 4.0 through 4.0.7, and 5.0 through 5.0.2; Rational Team Concert RTC 2.0 through...

CVE-2015-0112: Undefined Security Weakness

Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM 3.0.1, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Quality Manager RQM 2.0 through 2.0.1, 3.0 through 3.0.1.6, 4.0 through 4.0.7, and 5.0 through 5.0.2; Rational Team Concert RTC 2.0 through...

PT-2015-4476

Name of the Vulnerable Software and Affected Versions Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management CLM versions 3.0.1, 4.x through 4.0.6, and 5.x through 5.0.1 Rational Quality Manager RQM versions 2.0 through 2.0.1, 3.0 through 3.0.1.6, 4.0 through 4.0.6...

IBM Tivoli Endpoint Manager for Lifecycle Management Endpoint Manager for Remote Control Sensitive Information Disclosure Vulnerability

IBM Tivoli Endpoint Manager for Lifecycle Management is a suite of endpoint control software.Remote Control is a remote control component. The Endpoint Manager for Remote Control component of IBM Tivoli Endpoint Manager for Lifecycle Management IF6 does not set a security flag for cookies in http...

CVE-2015-1915

The Endpoint Manager for Remote Control component in IBM Tivoli Endpoint Manager for Lifecycle Management 9.0.1 before IF6 and 9.1.0 before IF6 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by interceptin...

Memory corruption

The Endpoint Manager for Remote Control component in IBM Tivoli Endpoint Manager for Lifecycle Management 9.0.1 before IF6 and 9.1.0 before IF6 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by interceptin...