Vulnerabilities > IBM
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2008-12-09 | CVE-2008-5384 | Permissions, Privileges, and Access Controls vulnerability in IBM AIX 6.1/6.1.1/6.1.2 crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to gain privileges by launching an editor. | 6.9 |
| 2008-12-05 | CVE-2008-5330 | Cross-Site Scripting vulnerability in IBM Rational Clearquest Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before 7.0.0.4, and 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1.3, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO of a URI associated with a VOB page. | 4.3 |
| 2008-12-05 | CVE-2008-5329 | Denial-Of-Service vulnerability in Rational ClearQuest ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbitrary database by specifying multiple comma-separated server identifiers on the JTLRMIREGISTRYSERVERS line in a jtl.properties file. | 7.5 |
| 2008-12-05 | CVE-2008-5328 | Cryptographic Issues vulnerability in IBM Rational Clearquest The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree during an import process. | 4.6 |
| 2008-12-05 | CVE-2008-5327 | Credentials Management vulnerability in IBM Rational Clearquest The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree. | 6.5 |
| 2008-12-05 | CVE-2008-5326 | Credentials Management vulnerability in IBM Rational Clearquest The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks. | 4.4 |
| 2008-12-05 | CVE-2008-5325 | Cross-Site Scripting vulnerability in IBM Rational Clearquest Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2008-12-05 | CVE-2008-5324 | Cross-Site Scripting vulnerability in IBM Rational Clearquest 2007/2008 Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 2007 before 2007D and 2008 before 2008B allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2008-11-27 | CVE-2008-5257 | Improper Input Validation vulnerability in IBM Tivoli Access Manager for E-Business 6.0.0.17 webseald in WebSEAL 6.0.0.17 in IBM Tivoli Access Manager for e-business allows remote attackers to cause a denial of service (crash or hang) via HTTP requests, as demonstrated by a McAfee vulnerability scan. | 4.3 |
| 2008-11-25 | CVE-2008-5228 | Cross-Site Scripting vulnerability in IBM Workplace Content Management 6.0/6.1 Cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being encoded." | 2.6 |