Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.1:*:*:*:*:*:*:*

part: a version: 4.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Engineering Lifecycle Manager (41a0da77-c88b-5f4b-a90e-662452d8f8e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1099 vulnerable 2026-06-08 05:09:12.863683 Details available
IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659.
Published: 2017-06-13T19:00:00.000Z
Updated: 2024-08-05T13:25:17.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9735 vulnerable 2026-06-08 05:08:24.404591 Details available
IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,
Published: 2017-05-15T21:00:00.000Z
Updated: 2024-08-06T02:59:03.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9707 vulnerable 2026-06-08 05:08:24.331161 Details available
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000784.
Published: 2017-03-31T18:00:00.000Z
Updated: 2024-08-06T02:59:03.414Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3014 vulnerable 2026-06-08 05:07:44.023569 Details available
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Quality Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Team Concert 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational DOORS Next Generation 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2016-11-30T11:00:00.000Z
Updated: 2024-08-05T23:40:14.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2947 vulnerable 2026-06-08 05:07:43.828586 Details available
IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5 allow remote authenticated users to obtain sensitive information via unspecified vectors.
Published: 2016-11-25T03:38:00.000Z
Updated: 2024-08-05T23:40:13.906Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2926 vulnerable 2026-06-08 05:07:43.733686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2864 vulnerable 2026-06-08 05:07:43.531570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0372 vulnerable 2026-06-08 05:07:15.116135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0284 vulnerable 2026-06-08 05:07:14.868964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0273 vulnerable 2026-06-08 05:07:14.795373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.