Vulnerabilities > IBM > Rational Collaborative Lifecycle Management
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-07-06 | CVE-2017-1509 | Information Exposure vulnerability in IBM products IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. | 4.0 |
| 2018-07-06 | CVE-2017-1488 | Information Exposure vulnerability in IBM products An undisclosed vulnerability in Jazz common products exists with potential for information disclosure. | 5.0 |
| 2018-07-06 | CVE-2017-1329 | Code Injection vulnerability in IBM products IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. | 3.5 |
| 2018-07-06 | CVE-2017-1248 | Code Injection vulnerability in IBM products IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. | 4.3 |
| 2018-07-06 | CVE-2017-1242 | Code Injection vulnerability in IBM products IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. | 3.5 |
| 2018-07-06 | CVE-2017-1239 | Information Exposure vulnerability in IBM products IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Error responses. | 5.0 |
| 2018-07-06 | CVE-2017-1238 | Cross-site Scripting vulnerability in IBM products IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to cross-site scripting. | 3.5 |
| 2018-07-06 | CVE-2017-1237 | Cross-site Scripting vulnerability in IBM products IBM Jazz based applications are vulnerable to cross-site scripting. | 3.5 |
| 2018-07-03 | CVE-2017-1717 | Cross-site Scripting vulnerability in IBM products IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. | 3.5 |
| 2018-07-03 | CVE-2017-1715 | Cross-site Scripting vulnerability in IBM products IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. | 3.5 |