IBM Corporation Rational Collaborative Lifecycle Management vulnerabilities
17 vulnerabilities
Known vulnerabilities in IBM Corporation Rational Collaborative Lifecycle Management, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2016-2981ibm corporationrational collaborative lifecycle management+1
EPSS score0.33%
An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference #: 1999965.CVE-2016-2866ibm corporationrational collaborative lifecycle management+1EPSS score0.85%
An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user.CVE-2016-2987ibm corporationrational collaborative lifecycle management+6EPSS score0.77%
An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker.CVE-2016-9707ibm corporationrational collaborative lifecycle management+7EPSS score1.52%
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000784.CVE-2016-9735ibm corporationrational collaborative lifecycle management+7EPSS score0.68%
IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,CVE-2016-6022ibm corporationrational collaborative lifecycle management+1EPSS score0.54%
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 2000784.CVE-2016-6061ibm corporationrational collaborative lifecycle management+1EPSS score0.54%
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2016-6040ibm corporationrational collaborative lifecycle management+1EPSS score0.51%
IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced.CVE-2016-6030ibm corporationrational collaborative lifecycle management+1EPSS score0.54%
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2016-6032ibm corporationrational collaborative lifecycle management+1EPSS score0.61%
IBM Rational Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2016-6028ibm corporationrational collaborative lifecycle management+1EPSS score0.77%
IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view.CVE-2016-6035ibm corporationrational collaborative lifecycle management+2EPSS score0.51%
IBM Rational Quality Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 116896.CVE-2016-6036ibm corporationrational collaborative lifecycle management+1EPSS score0.54%
IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 2000784.CVE-2016-6031ibm corporationrational collaborative lifecycle management+1EPSS score0.54%
IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 2000784.CVE-2016-6037ibm corporationrational collaborative lifecycle management+2EPSS score0.60%
IBM Rational Team Concert (RTC) is vulnerable to HTML injection. A remote attacker with project administrator privileges could send a project that contains malicious HTML code, which when the project is viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 116918.CVE-2016-8968ibm corporationrational collaborative lifecycle management+1EPSS score0.94%
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998515.CVE-2017-1103ibm corporationrational collaborative lifecycle management+2EPSS score1.22%
IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 120665.