Vulnerabilities > IBM > Low
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2018-07-10 | CVE-2018-1521 | Cross-site Scripting vulnerability in IBM Rational Team Concert IBM Rational Team Concert 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. | 3.5 |
2018-07-06 | CVE-2017-1237 | Cross-site Scripting vulnerability in IBM products IBM Jazz based applications are vulnerable to cross-site scripting. | 3.5 |
2018-07-06 | CVE-2017-1238 | Cross-site Scripting vulnerability in IBM products IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to cross-site scripting. | 3.5 |
2018-07-06 | CVE-2017-1242 | Code Injection vulnerability in IBM products IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. | 3.5 |
2018-07-06 | CVE-2017-1329 | Code Injection vulnerability in IBM products IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. | 3.5 |
2018-07-06 | CVE-2017-1795 | Information Exposure Through Log Files vulnerability in IBM Websphere MQ Managed File Transfer IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via trace logs in IBM WebSphere MQ Managed File Transfer. | 2.1 |
2018-07-06 | CVE-2018-1494 | Cross-site Scripting vulnerability in IBM Rational Doors Next Generation IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. | 3.5 |
2018-07-06 | CVE-2018-1555 | Cross-site Scripting vulnerability in IBM Content Foundation and Filenet Content Manager IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. | 3.5 |
2018-07-06 | CVE-2018-1556 | Cross-site Scripting vulnerability in IBM Content Foundation and Filenet Content Manager IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. | 3.5 |
2018-07-06 | CVE-2018-1621 | Cleartext Storage of Sensitive Information vulnerability in IBM Websphere Application Server IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local attacker to obtain clear text password in a trace file caused by improper handling of some datasource custom properties. | 2.1 |