Vulnerabilities > IBM > Rational Quality Manager

DATE CVE VULNERABILITY TITLE RISK
2018-07-10 CVE-2017-1729 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2018-07-06 CVE-2017-1559 Information Exposure vulnerability in IBM products
Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests.
network
low complexity
ibm CWE-200
4.3
2018-07-06 CVE-2017-1509 Information Exposure vulnerability in IBM products
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks.
network
low complexity
ibm CWE-200
4.3
2018-07-06 CVE-2017-1488 Information Exposure vulnerability in IBM products
An undisclosed vulnerability in Jazz common products exists with potential for information disclosure.
network
low complexity
ibm CWE-200
5.3
2018-07-06 CVE-2017-1329 Code Injection vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.
network
low complexity
ibm CWE-94
5.4
2018-07-06 CVE-2017-1248 Code Injection vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.
network
low complexity
ibm CWE-94
6.1
2018-07-06 CVE-2017-1242 Code Injection vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.
network
low complexity
ibm CWE-94
5.4
2018-07-06 CVE-2017-1239 Information Exposure vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Error responses.
network
low complexity
ibm CWE-200
5.3
2018-07-06 CVE-2017-1238 Cross-site Scripting vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2018-07-06 CVE-2017-1237 Cross-site Scripting vulnerability in IBM products
IBM Jazz based applications are vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4