Ibm Rational Team Concert vulnerabilities
147 known vulnerabilities affecting ibm/rational_team_concert.
Total CVEs
147
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH9MEDIUM127LOW11
Vulnerabilities
Page 7 of 8
CVE-2017-1251P4MEDIUMCVSS 4.3v4.0v4.0.0.1+16 more2017-11-27
CVE-2017-1251 [MEDIUM] CWE-200 CVE-2017-1251: An undisclosed vulnerability in CLM applications may result in some administrative deployment parame
An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker. IBM X-Force ID: 124631.
nvd
CVE-2021-29701P4MEDIUMCVSS 4.3v6.0.6v6.0.6.12022-01-11
CVE-2021-29701 [MEDIUM] CVE-2021-29701: IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6
IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticated attacker to obtain sensitive information from build definitions that could aid in further attacks against the system. IBM X-Force ID: 200657.
nvd
CVE-2020-4989P4MEDIUMCVSS 4.3v6.0.6v6.0.6.1+3 more2022-03-15
CVE-2020-4989 [MEDIUM] CWE-668 CVE-2020-4989: IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and 6.
IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and 6.0.0.1 could allow an authenticated user to obtain sensitive information about build definitions. IBM X-Force ID: 192707.
nvd
CVE-2020-4964P4MEDIUMCVSS 4.3v6.0.2v6.0.6+1 more2021-04-12
CVE-2020-4964 [MEDIUM] CVE-2020-4964: IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated
IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.
nvd
CVE-2019-4084P4MEDIUMCVSS 4.3≥ 6.0, ≤ 6.0.6.12019-06-27
CVE-2019-4084 [MEDIUM] CVE-2019-4084: IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) c
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.
nvd
CVE-2020-4487P4MEDIUMCVSS 4.3v6.0.2v6.0.6+1 more2021-01-08
CVE-2020-4487 [MEDIUM] CWE-209 CVE-2020-4487: IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a de
IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181862.
nvd
CVE-2020-4544P4MEDIUMCVSS 4.3v6.0.2v6.0.6+1 more2021-01-08
CVE-2020-4544 [MEDIUM] CWE-209 CVE-2020-4544: IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a de
IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 183189.
nvd
CVE-2017-1509P4MEDIUMCVSS 4.3≥ 6.0.0, ≤ 6.0.5v5.0.1+7 more2018-07-06
CVE-2017-1509 [MEDIUM] CWE-200 CVE-2017-1509: IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks. IBM X-Force ID: 129719.
nvd
CVE-2017-1240P4MEDIUMCVSS 4.3v4.0v4.0.0.1+16 more2017-11-27
CVE-2017-1240 [MEDIUM] CWE-200 CVE-2017-1240: IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error respon
IBM Rhapsody DM products could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-Force ID: 124359.
nvd
CVE-2017-1507P4MEDIUMCVSS 4.3v4.0v4.0.0.1+16 more2017-12-11
CVE-2017-1507 [MEDIUM] CWE-200 CVE-2017-1507: IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to f
IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system. IBM X-Force ID: 129619.
nvd
CVE-2016-9735P4MEDIUMCVSS 4.3v4.0v4.0.1+13 more2017-05-15
CVE-2016-9735 [MEDIUM] CWE-200 CVE-2016-9735: IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack tra
IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,
nvd
CVE-2018-1734P4MEDIUMCVSS 4.3≥ 6.0, ≤ 6.0.6.12019-06-27
CVE-2018-1734 [MEDIUM] CWE-200 CVE-2018-1734: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information in error messages that may be used by a malicious user to orchestrate further attacks. IBM X-Force ID: 147838.
nvd
CVE-2015-1971P4MEDIUMCVSS 4.3v2.0v2.0.0.1+22 more2016-01-03
CVE-2015-1971 [MEDIUM] CVE-2015-1971: Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifec
Unspecified vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF8 and 5.x before 5.0.2 IF10; Rational Quality Manager (RQM) 2.x and 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF8, and 5.x before 5.0.2 IF10; Rational Team Concert (RTC) 2.x and 3.x before 3.0.1.6 IF7, 4.x before
nvd
CVE-2011-2606P4MEDIUMCVSS 4.3v3.02011-06-30
CVE-2011-2606 [MEDIUM] CWE-79 CVE-2011-2606: Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511.
nvd
CVE-2016-9700P4MEDIUMCVSS 4.3v4.0v4.0.0+18 more2017-07-05
CVE-2016-9700 [MEDIUM] CWE-200 CVE-2016-9700: IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error
IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces. IBM X-Force ID: 119528.
nvd
CVE-2011-2607P4MEDIUMCVSS 4.3v3.02011-06-30
CVE-2011-2607 [MEDIUM] CWE-79 CVE-2011-2607: Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 3.0 allows remote attack
Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165513.
nvd
CVE-2016-0372P4LOWCVSS 3.7v3.0.1.6v4.0.0+13 more2016-11-24
CVE-2016-0372 [LOW] CWE-200 CVE-2016-0372: IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 b
IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0
nvd
CVE-2014-3050P4LOWCVSS 3.5v4.0v4.0.0.1+15 more2014-07-29
CVE-2014-3050 [LOW] CWE-200 CVE-2014-3050: IBM Rational Team Concert (RTC) 3.x before 3.0.1.6 IF3 and 4.x before 4.0.7 does not properly integr
IBM Rational Team Concert (RTC) 3.x before 3.0.1.6 IF3 and 4.x before 4.0.7 does not properly integrate with build engines, which allows remote authenticated users to discover credentials via unspecified vectors.
nvd
CVE-2015-0122P4LOWCVSS 3.5v2.0.0.2v3.0+19 more2015-03-13
CVE-2015-0122 [LOW] CWE-79 CVE-2015-0122: Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFi
Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0123.
nvd
CVE-2015-0123P4LOWCVSS 3.5v2.0.0.2v3.0+19 more2015-03-13
CVE-2015-0123 [LOW] CVE-2015-0123: Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFi
Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix 5, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0122.
nvd