GCVE - cpe:2.3:a:ibm:rational_clearquest:7.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_clearquest:7.0.2:*:*:*:*:*:*:*

part: a version: 7.0.2 update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Rational Clearquest (`ed91b9b9-9624-5021-944c-d123161950d5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-2517`	vulnerable	2026-06-08 04:55:08.344701	Details available Multiple unspecified vulnerabilities in IBM Rational ClearQuest before 7.1.1.02 have unknown impact and attack vectors, as demonstrated by an AppScan report. Published: 2010-06-30T18:00:00.000Z Updated: 2024-09-16T17:58:20.317Z Open on db.gcve.eu Reference links http://secunia.com/advisories/40341 http://www.vupen.com/english/advisories/2010/1615 http://www.securityfocus.com/bid/41205 http://www-01.ibm.com/support/docview.wss?uid=swg1PM07157	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4357`	vulnerable	2026-06-08 04:51:48.209096	Details available CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors. Published: 2009-12-18T19:00:00.000Z Updated: 2024-09-17T03:59:45.984Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1023370 http://www.securityfocus.com/bid/37385 http://secunia.com/advisories/37811 http://www-01.ibm.com/support/docview.wss?uid=swg1PK86377 http://www.vupen.com/english/advisories/2009/3580	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2211`	vulnerable	2026-06-08 04:51:27.291116	Details available Cross-site scripting (XSS) vulnerability in the CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2009-06-25T17:00:00.000Z Updated: 2024-09-17T03:18:46.639Z Open on db.gcve.eu Reference links http://secunia.com/advisories/35564 http://www-01.ibm.com/support/docview.wss?uid=swg1PK77030 http://www.securitytracker.com/id?1022456	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5327`	vulnerable	2026-06-08 04:50:50.840786	Details available The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree. Published: 2008-12-05T00:00:00.000Z Updated: 2024-08-07T10:49:12.480Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg1PK65908 http://secunia.com/advisories/32847 https://exchange.xforce.ibmcloud.com/vulnerabilities/46995	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-4592`	vulnerable	2026-06-08 04:49:56.791793	Details available Multiple cross-site scripting (XSS) vulnerabilities in the web interface for IBM Rational ClearQuest before 2003.06.16 Patch 2008A, 7.0.0.2_iFix01, and 7.0.1.1_iFix01 allow remote attackers to inject arbitrary web script or HTML via the (1) contextid, (2) username, (3) userNameVal, and (4) schema parameters to the login component. Published: 2008-03-20T00:00:00.000Z Updated: 2024-08-07T15:01:09.870Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/489861/100/0/threaded http://www.vupen.com/english/advisories/2008/0952/references http://www.securitytracker.com/id?1019685 http://securityreason.com/securityalert/3753 http://www.securityfocus.com/bid/28296	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.