Skip to content

Known vulnerabilities in IBM Corporation Rational Collaborative Lifecycle Management

Is your version affected?

CVE Summary Score Published
CVE-2016-9735 IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces Not rated May 15, 2017
CVE-2017-1103 IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when… Not rated May 10, 2017
CVE-2016-6037 IBM Rational Team Concert (RTC) is vulnerable to HTML injection Not rated May 10, 2017
CVE-2016-6035 IBM Rational Quality Manager is vulnerable to cross-site scripting Not rated May 10, 2017
CVE-2016-9707 IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when… Not rated Mar 31, 2017
CVE-2016-6022 IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting Not rated Mar 31, 2017
CVE-2016-6031 IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting Not rated Mar 31, 2017
CVE-2016-6036 IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting Not rated Mar 31, 2017
CVE-2016-2981 An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user… Not rated Mar 20, 2017
CVE-2016-8968 IBM Jazz Foundation is vulnerable to cross-site scripting Not rated Feb 15, 2017
CVE-2016-6032 IBM Rational Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting Not rated Feb 8, 2017
CVE-2016-2866 An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user Not rated Feb 8, 2017
CVE-2016-6061 IBM Jazz Foundation is vulnerable to cross-site scripting Not rated Feb 1, 2017
CVE-2016-6040 IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration… Not rated Feb 1, 2017
CVE-2016-6030 IBM Jazz Foundation is vulnerable to cross-site scripting Not rated Feb 1, 2017
CVE-2016-6028 IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to… Not rated Feb 1, 2017
CVE-2016-2987 An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown… Not rated Feb 1, 2017

Other IBM Corporation products