Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_clearquest:8.0:*:*:*:*:*:*:*

part: a version: 8.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Clearquest (ed91b9b9-9624-5021-944c-d123161950d5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-3041 vulnerable 2026-06-08 05:04:29.972745 Details available
The Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to obtain sensitive information from the client-server data stream via unspecified vectors associated with a "JSON hijacking attack."
Published: 2013-10-01T00:00:00.000Z
Updated: 2024-08-06T16:00:09.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0598 vulnerable 2026-06-08 05:03:48.757673 Details available
Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users.
Published: 2013-09-28T01:00:00.000Z
Updated: 2024-08-06T14:33:05.571Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5757 vulnerable 2026-06-08 05:02:58.177348 Details available
Cross-site scripting (XSS) vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
Published: 2013-03-21T20:00:00.000Z
Updated: 2024-08-06T21:14:16.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-2164 vulnerable 2026-06-08 05:00:53.128391 Details available
The Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to bypass intended access restrictions, and use the Site Administration menu to modify system settings, via a parameter-tampering attack.
Published: 2012-08-17T20:00:00.000Z
Updated: 2024-08-06T19:26:08.729Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0744 vulnerable 2026-06-08 05:00:44.703210 Details available
IBM Rational ClearQuest 7.1.x through 7.1.2.7 and 8.x through 8.0.0.3 allows remote attackers to obtain potentially sensitive information via a request to a (1) snoop, (2) hello, (3) ivt/, (4) hitcount, (5) HitCount.jsp, (6) HelloHTMLError.jsp, (7) HelloHTML.jsp, (8) HelloVXMLError.jsp, (9) HelloVXML.jsp, (10) HelloWMLError.jsp, (11) HelloWML.jsp, or (12) cqweb/j_security_check sample script.
Published: 2012-08-17T20:00:00.000Z
Updated: 2024-08-06T18:38:13.860Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1390 vulnerable 2026-06-08 04:57:58.776334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.