Vulnerabilities > IBM > Rational Quality Manager > 5.0.1

DATE CVE VULNERABILITY TITLE RISK
2018-07-10 CVE-2017-1791 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2018-07-10 CVE-2017-1738 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 contains an undisclosed vulnerability that would allow an authenticated user to obtain elevated privileges.
network
ibm CWE-79
3.5
2018-07-10 CVE-2017-1729 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2018-07-06 CVE-2017-1559 Information Exposure vulnerability in IBM products
Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests.
network
low complexity
ibm CWE-200
4.0
2018-07-06 CVE-2017-1509 Information Exposure vulnerability in IBM products
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks.
network
low complexity
ibm CWE-200
4.0
2018-07-06 CVE-2017-1488 Information Exposure vulnerability in IBM products
An undisclosed vulnerability in Jazz common products exists with potential for information disclosure.
network
low complexity
ibm CWE-200
5.0
2018-07-06 CVE-2017-1329 Code Injection vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.
network
ibm CWE-94
3.5
2018-07-06 CVE-2017-1248 Code Injection vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.
network
ibm CWE-94
4.3
2018-07-06 CVE-2017-1242 Code Injection vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.
network
ibm CWE-94
3.5
2018-07-06 CVE-2017-1239 Information Exposure vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Error responses.
network
low complexity
ibm CWE-200
5.0