CVE-2018-1829

CVE-2018-1829 affects IBM Rational Quality Manager (RQM) 5.0–6.0.6. The issue is a cross-site scripting vulnerability in the Web UI that lets an attacker embed arbitrary JavaScript, potentially altering functionality and leading to credentials disclosure within a trusted session. Affected product...

CVE-2018-1761

IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1486...

CVE-2018-1763

IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2018-1761

IBM Rational Team Concert 5.0–6.0.6 is affected by multiple cross-site scripting flaws in the Web UI that can embed arbitrary JavaScript and potentially disclose credentials within a trusted session. Root cause details are not provided beyond the description in the sources. Affected products/vers...

CVE-2018-1823

CVE-2018-1823 affects IBM Rational Quality Manager (RQM) 5.0 through 6.0.6. The issue is a cross-site scripting vulnerability that lets an attacker embed arbitrary JavaScript in the Web UI, potentially altering functionality and leading to credential disclosure in a trusted session. According to ...

CVE-2018-1759

IBM Rational Quality Manager versions 5.0–6.0.6 are affected by a cross-site scripting (XSS) vulnerability that allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure in a trusted session. Affected products include Rational CLM 5.0–6.0.6 and Rational Qu...

CVE-2018-1764

IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2018-1759

IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2018-1825

CVE-2018-1825 affects IBM Rational Quality Manager (RQM) 5.0–6.0.6. A cross-site scripting vulnerability lets an attacker embed arbitrary JavaScript in the Web UI, potentially disclosing credentials in a trusted session. The issue also affects Rational Collaborative Lifecycle Management 5.0–6.0.6...

CVE-2018-1829

IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2018-1823

IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2018-1763

IBM Rational Quality Manager versions 5.0–6.0.6 are affected by a cross-site scripting vulnerability in the Web UI that can let an attacker embed arbitrary JavaScript and potentially disclose credentials in a trusted session. Affected products: Rational Quality Manager 5.0–5.0.2 and 6.0–6.0.6 (RQ...

CVE-2018-1764

IBM Rational Quality Manager (RQM) versions 5.0–6.0.6 are affected by a cross‑site scripting vulnerability in the Web UI, allowing an attacker to embed arbitrary JavaScript and potentially disclose credentials in a trusted session. Root cause: XSS in RQM Web UI. Affected products/versions include...

CVE-2018-1688

Summary (CVE-2018-1688) IBM Jazz Foundation, used by CLM 5.0–6.0.6, is vulnerable to cross-site scripting in the Web UI, potentially allowing a trusted-session credential disclosure. The issue affects multiple CLM-related products built on IBM Jazz technology. Remediation is available via upgrade...

CVE-2018-1824

CVE-2018-1824 affects IBM Rational Quality Manager (RQM) components in Rational CLM/RQM 5.0–6.0.6. The vulnerability is a cross-site scripting issue in the Web UI that allows embedding arbitrary JavaScript, potentially altering functionality and leading to credential disclosure within a trusted s...

CVE-2018-1824

IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

PT-2019-9787

Name of the Vulnerable Software and Affected Versions IBM Rational Engineering Lifecycle Manager versions 5.0 through 6.0.6 Description The issue allows a malicious user to view any view if they know the URL link of the view, potentially accessing information that should not be visible to them...

CVE-2018-1910: Improper Neutralization of Input During Web Page Generation

IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

PT-2019-9557

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager versions 5.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

PT-2019-9575

Name of the Vulnerable Software and Affected Versions IBM Rational Quality Manager versions 5.0 through 6.0.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...