Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:rational_requirements_composer:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductRational Requirements Composer (a92c59fa-024a-52e0-89e3-2046aa6acda3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1546 vulnerable 2026-06-08 05:09:22.578822 Details available
IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130915.
Published: 2017-12-13T18:00:00.000Z
Updated: 2024-09-17T01:36:14.452Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1128 vulnerable 2026-06-08 05:09:13.070099 Details available
IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2017-02-08T19:00:00.000Z
Updated: 2024-08-05T13:25:17.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1127 vulnerable 2026-06-08 05:09:13.063674 Details available
IBM Rational DOORS Next Generation 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2017-02-08T19:00:00.000Z
Updated: 2024-08-05T13:25:17.150Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0219 vulnerable 2026-06-08 05:07:14.456014 Details available
XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote authenticated users to cause a denial of service via crafted XML data. IBM X-Force ID: 109693.
Published: 2018-01-16T19:00:00.000Z
Updated: 2024-08-05T22:08:13.510Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4962 vulnerable 2026-06-08 05:06:48.277512 Details available
Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager (RQM) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Team Concert (RTC) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Requirements Composer (RRC) 3.x before 3.0.1.6 IF7 and 4.x before 4.0.7 IF9; Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Engineering Lifecycle Manager (RELM) 4.x through 4.0.7, 5.x through 5.0.2, and 6.x before 6.0.1; Rational Rhapsody Design Manager (DM) 4.x through 4.0.7, 5.x through 5.0.2, and 6.x before 6.0.1; and Rational Software Architect Design Manager (DM) 4.x through 4.0.7, 5.x through 5.0.2, and 6.x before 6.0.1 uses weak permissions for unspecified project areas, which allows remote authenticated users to obtain sensitive information via unknown vectors.
Published: 2016-01-03T02:00:00.000Z
Updated: 2024-08-06T06:32:31.523Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4946 vulnerable 2026-06-08 05:06:48.167861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1971 vulnerable 2026-06-08 05:06:27.012207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1928 vulnerable 2026-06-08 05:06:26.803107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0132 vulnerable 2026-06-08 05:06:13.695199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0121 vulnerable 2026-06-08 05:06:13.667532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0112 vulnerable 2026-06-08 05:06:13.555753 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3092 vulnerable 2026-06-08 05:05:31.116494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5404 vulnerable 2026-06-08 05:04:51.569682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.