Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_quality_manager:4.0.0:*:*:*:*:*:*:*

part: a version: 4.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Quality Manager (6457201a-5946-57e9-99df-9e29bcf81e82)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1103 vulnerable 2026-06-08 05:09:12.903404 Details available
IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 120665.
Published: 2017-05-10T14:00:00.000Z
Updated: 2024-08-05T13:25:17.055Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9700 vulnerable 2026-06-08 05:08:24.262332 Details available
IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces. IBM X-Force ID: 119528.
Published: 2017-07-05T18:00:00.000Z
Updated: 2024-09-16T23:22:03.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6037 vulnerable 2026-06-08 05:07:58.667617 Details available
IBM Rational Team Concert (RTC) is vulnerable to HTML injection. A remote attacker with project administrator privileges could send a project that contains malicious HTML code, which when the project is viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 116918.
Published: 2017-05-10T14:00:00.000Z
Updated: 2024-08-06T01:22:20.663Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6035 vulnerable 2026-06-08 05:07:58.663355 Details available
IBM Rational Quality Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 116896.
Published: 2017-05-10T14:00:00.000Z
Updated: 2024-08-06T01:22:19.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3014 vulnerable 2026-06-08 05:07:44.023931 Details available
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Quality Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Team Concert 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational DOORS Next Generation 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Published: 2016-11-30T11:00:00.000Z
Updated: 2024-08-05T23:40:14.473Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2987 vulnerable 2026-06-08 05:07:43.979468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2947 vulnerable 2026-06-08 05:07:43.829004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2926 vulnerable 2026-06-08 05:07:43.733918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2864 vulnerable 2026-06-08 05:07:43.522883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0372 vulnerable 2026-06-08 05:07:15.115386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0284 vulnerable 2026-06-08 05:07:14.868390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0273 vulnerable 2026-06-08 05:07:14.805181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.