Vulnerabilities > IBM > Rational Quality Manager

DATE CVE VULNERABILITY TITLE RISK
2018-08-20 CVE-2017-1753 Code Injection vulnerability in IBM products
Multiple IBM Rational products are vulnerable to HTML injection.
network
low complexity
ibm CWE-94
5.4
2018-07-10 CVE-2018-1549 Injection vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to HTTP response splitting attacks.
network
low complexity
ibm CWE-74
5.4
2018-07-10 CVE-2018-1523 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2018-07-10 CVE-2018-1492 Session Fixation vulnerability in IBM products
IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to the server's failure to properly log out from the previous session.
low complexity
ibm CWE-384
6.8
2018-07-10 CVE-2018-1423 Information Exposure vulnerability in IBM products
IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system.
network
low complexity
ibm CWE-200
6.5
2018-07-10 CVE-2018-1396 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2018-07-10 CVE-2017-1793 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2018-07-10 CVE-2017-1792 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2018-07-10 CVE-2017-1791 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2018-07-10 CVE-2017-1738 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 contains an undisclosed vulnerability that would allow an authenticated user to obtain elevated privileges.
network
low complexity
ibm CWE-79
5.4