Vulnerabilities > IBM > Rational Quality Manager > 6.0.3

DATE CVE VULNERABILITY TITLE RISK
2018-10-02 CVE-2018-1404 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2018-10-02 CVE-2018-1403 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2018-10-02 CVE-2018-1395 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2018-10-02 CVE-2017-1649 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2018-08-20 CVE-2018-1394 Cross-site Scripting vulnerability in IBM products
Multiple IBM Rational products are vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2018-08-20 CVE-2017-1753 Code Injection vulnerability in IBM products
Multiple IBM Rational products are vulnerable to HTML injection.
network
ibm CWE-94
3.5
2018-07-10 CVE-2018-1549 Injection vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to HTTP response splitting attacks.
network
ibm CWE-74
4.9
2018-07-10 CVE-2018-1523 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2018-07-10 CVE-2018-1492 Session Fixation vulnerability in IBM products
IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous session.
local
low complexity
ibm CWE-384
4.6
2018-07-10 CVE-2018-1423 Information Exposure vulnerability in IBM products
IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system.
network
low complexity
ibm CWE-200
4.0