Skip to content

Known vulnerabilities in IBM Rational Engineering Lifecycle Manager

Is your version affected?

CVE Summary Score Published
CVE-2018-1846 IBM Rational Engineering Lifecycle Manager 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to a XML External… 7.1 High Nov 2, 2018
CVE-2018-1659 IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to cross-site scripting 5.4 Medium Sep 25, 2018
CVE-2018-1607 IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to a XML External Entity… 7.1 High Sep 25, 2018
CVE-2018-1588 IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6) is vulnerable to… 7.1 High Sep 25, 2018
CVE-2018-1539 IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 could allow remote attackers to bypass… 5.4 Medium Sep 25, 2018
CVE-2018-1560 IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to cross-site scripting 5.4 Medium Sep 25, 2018
CVE-2018-1394 Multiple IBM Rational products are vulnerable to cross-site scripting 5.4 Medium Aug 20, 2018
CVE-2017-1753 Multiple IBM Rational products are vulnerable to HTML injection 5.4 Medium Aug 20, 2018
CVE-2018-1492 IBM Jazz Foundation products could allow a user with physical access to the system to log in as another user due to… 4.3 Medium Jul 10, 2018
CVE-2018-1423 IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in… 4.3 Medium Jul 10, 2018
CVE-2017-1509 IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that… 4.3 Medium Jul 6, 2018
CVE-2017-1559 Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests 3.1 Low Jul 6, 2018
CVE-2017-1488 An undisclosed vulnerability in Jazz common products exists with potential for information disclosure 3.7 Low Jul 6, 2018
CVE-2017-1237 IBM Jazz based applications are vulnerable to cross-site scripting 5.4 Medium Jul 6, 2018
CVE-2017-1734 IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational… Not rated Apr 24, 2018
CVE-2017-1725 IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational… Not rated Apr 24, 2018
CVE-2017-1700 IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational… Not rated Apr 24, 2018
CVE-2017-1429 IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting Not rated Oct 2, 2017
CVE-2017-1364 IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting Not rated Oct 2, 2017
CVE-2017-1369 IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting Not rated Oct 2, 2017
CVE-2017-1359 IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting Not rated Oct 2, 2017
CVE-2017-1335 IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting Not rated Oct 2, 2017
CVE-2017-1334 IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting Not rated Oct 2, 2017
CVE-2017-1324 IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting Not rated Oct 2, 2017
CVE-2017-1168 IBM Rational Engineering Lifecycle Manager 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting Not rated Aug 10, 2017

Other IBM products