Rational Clearquest
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:rational_clearquest:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Rational Clearquest (ed91b9b9-9624-5021-944c-d123161950d5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-28796 |
vulnerable | 2026-06-08 06:33:27.345215 |
Details available
MEDIUM (6.4)
IBM ClearQuest (CQ) 9.1 through 9.1.0.6 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 286833.
Published: 2024-07-17T18:14:45.862Z
Updated: 2024-08-02T00:56:58.414Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2922 |
vulnerable | 2026-06-08 05:07:43.711903 |
Details available
LOW (3.7)
IBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3 (CQ OSLC linkages, EmailRelay) fails to check the SSL certificate against the requested hostname. It is subject to a man-in-the-middle attack with an impersonating server observing all the data transmitted to the real server. IBM X-Force ID: 113353.
Published: 2018-08-13T16:00:00.000Z
Updated: 2024-09-16T23:10:24.966Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0950 |
vulnerable | 2026-06-08 05:05:15.198086 |
Details available
Multiple XML external entity (XXE) vulnerabilities in (1) CQWeb / CM Server, (2) ClearQuest Native client, (3) ClearQuest Eclipse client, and (4) ClearQuest Eclipse Designer components in IBM Rational ClearQuest 7.1.1 through 7.1.1.9, 7.1.2 through 7.1.2.13, 8.0.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92623.
Published: 2018-04-20T21:00:00.000Z
Updated: 2024-08-06T09:34:40.524Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2517 |
vulnerable | 2026-06-08 04:55:08.323326 |
Details available
Multiple unspecified vulnerabilities in IBM Rational ClearQuest before 7.1.1.02 have unknown impact and attack vectors, as demonstrated by an AppScan report.
Published: 2010-06-30T18:00:00.000Z
Updated: 2024-09-16T17:58:20.317Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5329 |
vulnerable | 2026-06-08 04:50:50.841659 |
Details available
ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbitrary database by specifying multiple comma-separated server identifiers on the JTLRMIREGISTRYSERVERS line in a jtl.properties file.
Published: 2008-12-05T00:00:00.000Z
Updated: 2024-08-07T10:49:12.554Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5328 |
vulnerable | 2026-06-08 04:50:50.841212 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5325 |
vulnerable | 2026-06-08 04:50:50.833077 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4592 |
vulnerable | 2026-06-08 04:49:56.790177 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.