Rational Clearquest@7.1.1.4 Security Vulnerabilities and Issues — Rational Clearquest@7.1.1.4 CVE List

Lucene search

IbmRational Clearquest7.1.1.4

3 matches found

CVE•added 2013/09/28 3:40 a.m.•45 views

CVE-2013-0598

Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users.

6.8CVSS7.2AI score0.00119EPSS

CVE•added 2013/10/01 12:55 a.m.•37 views

CVE-2013-3041

The Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to obtain sensitive information from the client-server data stream via unspecified vectors associated with a "JSON hijacking attack."

4.3CVSS6AI score0.00207EPSS

CVE•added 2013/03/21 8:55 p.m.•35 views

CVE-2012-5757

Cross-site scripting (XSS) vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

4.3CVSS5.6AI score0.00266EPSS