Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_clearquest:7.1.2.8:*:*:*:*:*:*:*

part: a version: 7.1.2.8 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Clearquest (ed91b9b9-9624-5021-944c-d123161950d5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-4996 vulnerable 2026-06-08 05:06:48.465669 Details available
IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover credentials via unspecified vectors.
Published: 2016-01-02T02:00:00.000Z
Updated: 2024-08-06T06:32:31.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8925 vulnerable 2026-06-08 05:06:10.459328 Details available
Cross-site request forgery (CSRF) vulnerability in ClearQuest Web in IBM Rational ClearQuest 7.1.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout or insert XSS sequences.
Published: 2015-03-25T01:00:00.000Z
Updated: 2024-08-06T13:33:12.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3041 vulnerable 2026-06-08 05:04:29.970736 Details available
The Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to obtain sensitive information from the client-server data stream via unspecified vectors associated with a "JSON hijacking attack."
Published: 2013-10-01T00:00:00.000Z
Updated: 2024-08-06T16:00:09.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0598 vulnerable 2026-06-08 05:03:48.755411 Details available
Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users.
Published: 2013-09-28T01:00:00.000Z
Updated: 2024-08-06T14:33:05.571Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5765 vulnerable 2026-06-08 05:02:58.185908 Details available
The Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a SQL error message.
Published: 2012-12-20T11:00:00.000Z
Updated: 2024-08-06T21:14:16.411Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5757 vulnerable 2026-06-08 05:02:58.174943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4839 vulnerable 2026-06-08 05:02:52.916696 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.