Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_clearquest:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Clearquest (ed91b9b9-9624-5021-944c-d123161950d5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-4603 vulnerable 2026-06-08 04:56:29.631639 Details available
IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 does not prevent modification of back-reference fields, which allows remote authenticated users to interfere with intended record relationships, and possibly cause a denial of service (loop) or have unspecified other impact, by (1) adding or (2) removing a back reference.
Published: 2010-12-29T17:27:00.000Z
Updated: 2024-08-07T03:51:17.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4601 vulnerable 2026-06-08 04:56:29.609904 Details available
Multiple unspecified vulnerabilities in IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 allow attackers to have an unknown impact via vectors related to third-party .ocx files.
Published: 2010-12-29T17:27:00.000Z
Updated: 2024-09-17T02:20:51.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2517 vulnerable 2026-06-08 04:55:08.330534 Details available
Multiple unspecified vulnerabilities in IBM Rational ClearQuest before 7.1.1.02 have unknown impact and attack vectors, as demonstrated by an AppScan report.
Published: 2010-06-30T18:00:00.000Z
Updated: 2024-09-16T17:58:20.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4357 vulnerable 2026-06-08 04:51:48.205976 Details available
CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors.
Published: 2009-12-18T19:00:00.000Z
Updated: 2024-09-17T03:59:45.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2211 vulnerable 2026-06-08 04:51:27.283993 Details available
Cross-site scripting (XSS) vulnerability in the CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2009-06-25T17:00:00.000Z
Updated: 2024-09-17T03:18:46.639Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5327 vulnerable 2026-06-08 04:50:50.839119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5090 vulnerable 2026-06-08 04:49:57.824841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.