Vulnerabilities > IBM > Rational Quality Manager > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-07-06 CVE-2017-1488 Information Exposure vulnerability in IBM products
An undisclosed vulnerability in Jazz common products exists with potential for information disclosure.
network
low complexity
ibm CWE-200
5.3
2018-07-06 CVE-2017-1329 Code Injection vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.
network
low complexity
ibm CWE-94
5.4
2018-07-06 CVE-2017-1248 Code Injection vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.
network
low complexity
ibm CWE-94
6.1
2018-07-06 CVE-2017-1242 Code Injection vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.
network
low complexity
ibm CWE-94
5.4
2018-07-06 CVE-2017-1239 Information Exposure vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Error responses.
network
low complexity
ibm CWE-200
5.3
2018-07-06 CVE-2017-1238 Cross-site Scripting vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2018-07-06 CVE-2017-1237 Cross-site Scripting vulnerability in IBM products
IBM Jazz based applications are vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2018-07-03 CVE-2017-1717 Cross-site Scripting vulnerability in IBM products
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2018-07-03 CVE-2017-1715 Cross-site Scripting vulnerability in IBM products
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2018-07-03 CVE-2017-1691 Cross-site Scripting vulnerability in IBM products
IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4