Ibm Rational Doors Next Generation vulnerabilities

164 known vulnerabilities affecting ibm/rational_doors_next_generation.

Total CVEs

164

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

HIGH8MEDIUM146LOW10

Vulnerabilities

SortPage 7 of 9

CVE-2020-5004P4MEDIUMCVSS 5.4v6.0.6v6.0.6.1+3 more2021-07-28

CVE-2020-5004 [MEDIUM] CWE-79 CVE-2020-5004: IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192957.

nvd

CVE-2017-1127P4MEDIUMCVSS 5.4v5.0v5.0.0+6 more2017-02-08

CVE-2017-1127 [MEDIUM] CWE-79 CVE-2017-1127: IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vuln IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

nvd

CVE-2017-1128P4MEDIUMCVSS 5.4v5.0v5.0.0+5 more2017-02-08

CVE-2017-1128 [MEDIUM] CWE-79 CVE-2017-1128: IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vul IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

nvd

CVE-2017-1099P4MEDIUMCVSS 4.3v4.0v4.0.1+13 more2017-06-13

CVE-2017-1099 [MEDIUM] CWE-200 CVE-2017-1099: IBM Jazz Foundation could expose potentially sensitive information to authenticated users through st IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659.

nvd

CVE-2016-6055P4MEDIUMCVSS 5.4v5.0v5.0.0+5 more2017-02-23

CVE-2016-6055 [MEDIUM] CWE-79 CVE-2016-6055: IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vul IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1995515.

nvd

CVE-2015-0112P4MEDIUMCVSS 4.0v4.0.0v4.0.1+8 more2015-06-07

CVE-2015-0112 [MEDIUM] CVE-2015-0112: Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Quality Manager (RQM) 2.0 through 2.0.1, 3.0 through 3.0.1.6, 4.0 through 4.0.7, and 5.0 through 5.0.2; Rational Team Concert (RTC) 2.0 through 2.0.0.2, 3.x before 3.0.1.6 IF6, 4.x before 4.0.7 IF5, and 5.

nvd

CVE-2016-5955P4MEDIUMCVSS 5.4v6.0.22016-11-25

CVE-2016-5955 [MEDIUM] CWE-79 CVE-2016-5955: Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 6.0.2 before iFix004 Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 6.0.2 before iFix004 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

nvd

CVE-2017-1524P4MEDIUMCVSS 4.3≥ 4.0.1, ≤ 4.0.7≥ 6.0.0, ≤ 6.0.5+3 more2018-03-23

CVE-2017-1524 [MEDIUM] CWE-200 CVE-2017-1524: IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an aut IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970.

nvd

CVE-2017-1602P4MEDIUMCVSS 4.3≥ 4.0.1, ≤ 4.0.7≥ 6.0.0, ≤ 6.0.5+3 more2018-03-23

CVE-2017-1602 [MEDIUM] CWE-552 CVE-2017-1602: IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticate IBM RSA DM (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to access settings that they should not be able to using a specially crafted URL. IBM X-Force ID: 132625.

nvd

CVE-2014-6131P4MEDIUMCVSS 4.0v4.0.0v4.0.1+9 more2015-03-18

CVE-2014-6131 [MEDIUM] CWE-200 CVE-2014-6131: IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x befo

nvd

CVE-2015-7471P4MEDIUMCVSS 4.8≥ 4.0, ≤ 4.0.7v5.0+4 more2018-03-15

CVE-2015-7471 [MEDIUM] CWE-79 CVE-2015-7471: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3. Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Quality Manager (RQM) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and

nvd

CVE-2017-1725P4MEDIUMCVSS 4.3≥ 5.0, ≤ 5.0.2≥ 6.0, ≤ 6.0.5+9 more2018-04-24

CVE-2017-1725 [MEDIUM] CWE-200 CVE-2017-1725: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Manageme IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) contain

nvd

CVE-2017-1559P4MEDIUMCVSS 4.3≥ 6.0.0, ≤ 6.0.5v5.0.1+7 more2018-07-06

CVE-2017-1559 [MEDIUM] CWE-200 CVE-2017-1559: Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts v Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests. IBM X-Force ID: 131758.

nvd

CVE-2017-1191P4MEDIUMCVSS 4.3≥ 4.0.1, ≤ 4.0.7≥ 5.0.0, ≤ 5.0.2+1 more2017-12-27

CVE-2017-1191 [MEDIUM] CVE-2017-1191: An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Man An undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle Management 4.0, 5.0, and 6.0) with potential for failure to restrict URL Access. IBM X-Force ID: 123661.

nvd

CVE-2018-1731P4MEDIUMCVSS 4.8v5.0.2v5.0+8 more2019-04-03

CVE-2018-1731 [MEDIUM] CWE-79 CVE-2018-1731: IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-s IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 147710.

nvd

CVE-2018-1606P4MEDIUMCVSS 4.3≥ 5.0.0, ≤ 5.0.2≥ 6.0.0, ≤ 6.0.6+10 more2018-11-06

CVE-2018-1606 [MEDIUM] CWE-200 CVE-2018-1606: IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6. IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Ratio

nvd

CVE-2017-1734P4MEDIUMCVSS 4.3≥ 5.0, ≤ 5.0.2≥ 6.0, ≤ 6.0.5+9 more2018-04-24

CVE-2017-1734 [MEDIUM] CWE-200 CVE-2017-1734: IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Manageme IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next Generation (RDNG), Rational Engineering Lifecycle Manager (RELM), Rational Team Concert (RTC), Rational Quality Manager (RQM), Rational Rhapsody Design Manager (Rhapsody DM), and Rational Software Architect (RSA DM) stores

nvd

CVE-2017-1570P4MEDIUMCVSS 4.3v4.0.1v4.0.2+13 more2017-11-27

CVE-2017-1570 [MEDIUM] CWE-200 CVE-2017-1570: IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 131852.

nvd

CVE-2016-2987P4MEDIUMCVSS 4.3v4.0v4.0.0+14 more2017-02-01

CVE-2016-2987 [MEDIUM] CWE-200 CVE-2016-2987: An undisclosed vulnerability in CLM applications may result in some administrative deployment parame An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker.

nvd

CVE-2017-1251P4MEDIUMCVSS 4.3v4.0.1v4.0.2+13 more2017-11-27

CVE-2017-1251 [MEDIUM] CWE-200 CVE-2017-1251: An undisclosed vulnerability in CLM applications may result in some administrative deployment parame An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. IBM X-Force ID: 124631.

nvd

← Previous7 / 9Next →