Cross site scripting

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the...

CVE-2017-1791

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

Design/Logic Flaw

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 contains an undisclosed vulnerability that would allow an authenticated user to obtain elevated privileges. IBM X-Force ID: 134919...

CVE-2018-1523

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2017-1738

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 contains an undisclosed vulnerability that would allow an authenticated user to obtain elevated privileges. IBM X-Force ID: 134919...

CVE-2017-1729

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2017-1738

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 contains an undisclosed vulnerability that would allow an authenticated user to obtain elevated privileges. IBM X-Force ID: 134919...

CVE-2017-1738

CVE-2017-1738 affects IBM Rational Quality Manager 5.0–5.0.2 and 6.0–6.0.5. An authenticated user could obtain elevated privileges due to an undisclosed vulnerability. The IBM bulletin lists fixes: for 6.0.x, upgrade to 6.0.4 iFix010 or later (or 6.0.5 iFix006 or later; 6.0.2 iFix017 or later) an...

CVE-2018-1396

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1549

CVE-2018-1549 affects IBM Rational Quality Manager: vulnerable in RQM 5.0–5.0.2 and 6.0–6.0.5 due to HTTP response splitting. A remote attacker could craft a URL to trigger a split response, enabling web cache poisoning, cross-site scripting, and potential sensitive data exposure. Remediation per...

CVE-2017-1729

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1396

Vulnerability summary: CVE-2018-1396 affects IBM Rational Quality Manager (RQM) versions 5.0–5.0.2 and 6.0–6.0.5, with an XSS flaw in the Web UI that can lead to credential disclosure in a trusted session. Affected products/versions: Rational Quality Manager 5.0–5.0.2 and 6.0–6.0.5 (6.0.6 is not ...

CVE-2017-1793

CVE-2017-1793 affects IBM Rational Quality Manager: cross-site scripting in the Web UI exposed in RQM 5.0–5.0.2 and 6.0–6.0.5, enabling embedded JavaScript and potential credential disclosure in a trusted session. Affected products: Rational Quality Manager 5.0–5.0.2 and 6.0–6.0.5 (Rational CLM 5...

CVE-2017-1792

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2018-1523

IBM Rational Quality Manager is affected by CVE-2018-1523: a cross-site scripting flaw in the Web UI for RQM 5.0–5.0.2 and 6.0–6.0.5, enabling injection of arbitrary JavaScript and potential credential disclosure in a trusted session. Remediation per IBM: upgrade to 5.0.2 iFix26 or later, or 6.0....

CVE-2018-1523

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2017-1793

IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2017-1791

IBM Rational Quality Manager is affected by CVE-2017-1791, a cross-site scripting vulnerability in the Web UI. Affected are Rational Quality Manager 5.0–5.0.2 and 6.0–6.0.5, allowing an attacker to embed arbitrary JavaScript that could alter functionality and potentially disclose credentials with...

CVE-2017-1729

IBM Rational Quality Manager is affected by a Cross-Site Scripting vulnerability identified as CVE-2017-1729 in versions 5.0–5.0.2 and 6.0–6.0.5 (Web UI). The underlying issue is a Web UI XSS that can allow an attacker to embed arbitrary JavaScript, potentially causing credentials disclosure with...

CVE-2017-1792

CVE-2017-1792 affects IBM Rational Quality Manager (RQM) 5.0–5.0.2 and 6.0–6.0.5, with a cross-site scripting vulnerability in the Web UI that can lead to credential disclosure within a trusted session. Supported Affected versions include Rational Quality Manager 5.0–5.0.2 and 6.0–6.0.5; Release ...