Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.05:*:*:*:*:*:*:*

part: a version: 4.05 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Engineering Lifecycle Manager (41a0da77-c88b-5f4b-a90e-662452d8f8e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3092 vulnerable 2026-06-08 05:05:31.096411 Details available
IBM Jazz Team Server, as used in Rational Collaborative Lifecycle Management; Rational Quality Manager 3.x before 3.0.1.6 iFix 3, 4.x before 4.0.7, and 5.x before 5.0.1; and other Rational products, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
Published: 2014-09-12T01:00:00.000Z
Updated: 2024-08-06T10:35:55.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3037 vulnerable 2026-06-08 05:05:30.838199 Details available
Cross-site request forgery (CSRF) vulnerability in IBM Configuration Management Application (aka VVC) in IBM Rational Engineering Lifecycle Manager before 4.0.7 and 5.x before 5.0.1, Rational Software Architect Design Manager before 4.0.7 and 5.x before 5.0.1, and Rational Rhapsody Design Manager before 4.0.7 and 5.x before 5.0.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Published: 2014-09-10T10:00:00.000Z
Updated: 2024-08-06T10:28:46.301Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.