Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm rational collaborative lifecycle management 4.0.5 vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2016-2981
An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference #: 1999965.
Ibm Rational Collaborative Lifecycle Management 4.0Ibm Rational Collaborative Lifecycle Management 4.0.1Ibm Rational Collaborative Lifecycle Management 6.0.3Ibm Rational Collaborative Lifecycle Management 4.0.2Ibm Rational Collaborative Lifecycle Management 4.0.4Ibm Rational Collaborative Lifecycle Management 6.0Ibm Rational Collaborative Lifecycle Management 6.0.2Ibm Rational Collaborative Lifecycle Management 4.0.6Ibm Rational Collaborative Lifecycle Management 5.0Ibm Rational Collaborative Lifecycle Management 4.0.7Ibm Rational Collaborative Lifecycle Management 5.0.1Ibm Rational Collaborative Lifecycle Management 4.0.3Ibm Rational Collaborative Lifecycle Management 4.0.5Ibm Rational Collaborative Lifecycle Management 5.0.2Ibm Rational Collaborative Lifecycle Management 6.0.1
3.5
CVSSv2
CVE-2016-6032
IBM Rational Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ibm Rational Collaborative Lifecycle Management 6.0.1Ibm Rational Collaborative Lifecycle Management 6.0.2Ibm Rational Collaborative Lifecycle Management 6.0.3Ibm Rational Collaborative Lifecycle Management 4.0.0Ibm Rational Collaborative Lifecycle Management 4.0.2Ibm Rational Collaborative Lifecycle Management 5.0.1Ibm Rational Collaborative Lifecycle Management 6.0.0Ibm Rational Collaborative Lifecycle Management 4.0.4Ibm Rational Collaborative Lifecycle Management 4.0.5Ibm Rational Collaborative Lifecycle Management 4.0.6Ibm Rational Collaborative Lifecycle Management 4.0.7Ibm Rational Collaborative Lifecycle Management 4.0.1Ibm Rational Collaborative Lifecycle Management 4.0.3Ibm Rational Collaborative Lifecycle Management 5.0.0Ibm Rational Collaborative Lifecycle Management 5.0.2
4
CVSSv2
CVE-2016-2866
An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user.
Ibm Rational Collaborative Lifecycle Management 4.0.4Ibm Rational Collaborative Lifecycle Management 4.0.5Ibm Rational Collaborative Lifecycle Management 4.0.6Ibm Rational Collaborative Lifecycle Management 4.0.7Ibm Rational Collaborative Lifecycle Management 4.0.1Ibm Rational Collaborative Lifecycle Management 4.0.3Ibm Rational Collaborative Lifecycle Management 5.0.0Ibm Rational Collaborative Lifecycle Management 5.0.2Ibm Rational Collaborative Lifecycle Management 6.0.0Ibm Rational Collaborative Lifecycle Management 6.0.1Ibm Rational Collaborative Lifecycle Management 6.0.2Ibm Rational Collaborative Lifecycle Management 6.0.3Ibm Rational Collaborative Lifecycle Management 4.0.0Ibm Rational Collaborative Lifecycle Management 4.0.2Ibm Rational Collaborative Lifecycle Management 5.0.1
4
CVSSv2
CVE-2016-6028
IBM Jazz technology based products might allow an malicious user to view work item titles that they do not have privilege to view.
Ibm Rational Collaborative Lifecycle Management 4.0.1Ibm Rational Collaborative Lifecycle Management 4.0.2Ibm Rational Collaborative Lifecycle Management 4.0.3Ibm Rational Collaborative Lifecycle Management 4.0.4Ibm Rational Collaborative Lifecycle Management 4.0.5Ibm Rational Collaborative Lifecycle Management 5.0.2Ibm Rational Collaborative Lifecycle Management 6.0.0Ibm Rational Collaborative Lifecycle Management 6.0.1Ibm Rational Collaborative Lifecycle Management 6.0.2Ibm Rational Collaborative Lifecycle Management 4.0.0Ibm Rational Collaborative Lifecycle Management 4.0.7Ibm Rational Collaborative Lifecycle Management 5.0.1Ibm Rational Collaborative Lifecycle Management 4.0.6Ibm Rational Collaborative Lifecycle Management 5.0.0
3.5
CVSSv2
CVE-2016-6030
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ibm Rational Collaborative Lifecycle Management 6.0.2Ibm Rational Collaborative Lifecycle Management 4.0.4Ibm Rational Collaborative Lifecycle Management 4.0.5Ibm Rational Collaborative Lifecycle Management 4.0.6Ibm Rational Collaborative Lifecycle Management 4.0.7Ibm Rational Collaborative Lifecycle Management 5.0.0Ibm Rational Collaborative Lifecycle Management 4.0.1Ibm Rational Collaborative Lifecycle Management 4.0.3Ibm Rational Collaborative Lifecycle Management 5.0.2Ibm Rational Collaborative Lifecycle Management 6.0.1Ibm Rational Collaborative Lifecycle Management 4.0.0Ibm Rational Collaborative Lifecycle Management 4.0.2Ibm Rational Collaborative Lifecycle Management 5.0.1Ibm Rational Collaborative Lifecycle Management 6.0.0
3.5
CVSSv2
CVE-2016-6061
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Ibm Rational Collaborative Lifecycle Management 4.0.0Ibm Rational Collaborative Lifecycle Management 4.0.1Ibm Rational Collaborative Lifecycle Management 4.0.6Ibm Rational Collaborative Lifecycle Management 4.0.7Ibm Rational Collaborative Lifecycle Management 5.0.0Ibm Rational Collaborative Lifecycle Management 5.0.1Ibm Rational Collaborative Lifecycle Management 4.0.2Ibm Rational Collaborative Lifecycle Management 4.0.4Ibm Rational Collaborative Lifecycle Management 6.0.0Ibm Rational Collaborative Lifecycle Management 6.0.2Ibm Rational Collaborative Lifecycle Management 4.0.3Ibm Rational Collaborative Lifecycle Management 4.0.5Ibm Rational Collaborative Lifecycle Management 5.0.2Ibm Rational Collaborative Lifecycle Management 6.0.1
6
CVSSv2
CVE-2016-6040
IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced.
Ibm Rational Collaborative Lifecycle Management 4.0.3Ibm Rational Collaborative Lifecycle Management 4.0.4Ibm Rational Collaborative Lifecycle Management 4.0.5Ibm Rational Collaborative Lifecycle Management 4.0.6Ibm Rational Collaborative Lifecycle Management 6.0.0Ibm Rational Collaborative Lifecycle Management 6.0.1Ibm Rational Collaborative Lifecycle Management 6.0.2Ibm Rational Collaborative Lifecycle Management 4.0.1Ibm Rational Collaborative Lifecycle Management 5.0.0Ibm Rational Collaborative Lifecycle Management 5.0.2Ibm Rational Collaborative Lifecycle Management 4.0.0Ibm Rational Collaborative Lifecycle Management 4.0.2Ibm Rational Collaborative Lifecycle Management 4.0.7Ibm Rational Collaborative Lifecycle Management 5.0.1
10
CVSSv2
CVE-2014-0862
Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x prior to 3.0.1.6 iFix 2 and 4.x prior to 4.0.6 allows remote malicious users to execute arbitrary code via unknown vectors.
Ibm Rational Collaborative Lifecycle Management 3.0.1.2Ibm Rational Collaborative Lifecycle Management 3.0.1.1Ibm Rational Collaborative Lifecycle Management 4.0.1Ibm Rational Collaborative Lifecycle Management 4.0.0Ibm Rational Collaborative Lifecycle Management 3.0.1.4Ibm Rational Collaborative Lifecycle Management 3.0.1.3Ibm Rational Collaborative Lifecycle Management 4.0.3Ibm Rational Collaborative Lifecycle Management 4.0.2Ibm Rational Collaborative Lifecycle Management 3.0.1.6Ibm Rational Collaborative Lifecycle Management 3.0.1.5Ibm Rational Collaborative Lifecycle Management 4.0.5Ibm Rational Collaborative Lifecycle Management 4.0.4Ibm Rational Collaborative Lifecycle Management 3.0.1Ibm Rational Collaborative Lifecycle Management 3.0.0
3.5
CVSSv2
CVE-2017-1363
IBM Team Concert (RTC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126856.
Ibm Rational Collaborative Lifecycle Management 6.0.1Ibm Rational Collaborative Lifecycle Management 6.0.2Ibm Rational Collaborative Lifecycle Management 6.0.3Ibm Rational Collaborative Lifecycle Management 6.0.4Ibm Rational Collaborative Lifecycle Management 4.0Ibm Rational Collaborative Lifecycle Management 4.0.2Ibm Rational Collaborative Lifecycle Management 5.0.1Ibm Rational Collaborative Lifecycle Management 6.0Ibm Rational Collaborative Lifecycle Management 4.0.4Ibm Rational Collaborative Lifecycle Management 4.0.5Ibm Rational Collaborative Lifecycle Management 4.0.6Ibm Rational Collaborative Lifecycle Management 5.0Ibm Rational Collaborative Lifecycle Management 4.0.1Ibm Rational Collaborative Lifecycle Management 4.0.3Ibm Rational Collaborative Lifecycle Management 4.0.7Ibm Rational Collaborative Lifecycle Management 5.0.2
4
CVSSv2
CVE-2017-1295
IBM RSA DM contains unspecified vulnerability in CLM Applications with potential for information leakage. IBM X-Force ID: 125157.
Ibm Rational Collaborative Lifecycle Management 6.0.2Ibm Rational Collaborative Lifecycle Management 6.0.3Ibm Rational Collaborative Lifecycle Management 6.0.4Ibm Rational Collaborative Lifecycle Management 4.0.1Ibm Rational Collaborative Lifecycle Management 4.0.3Ibm Rational Collaborative Lifecycle Management 4.0.7Ibm Rational Collaborative Lifecycle Management 5.0.2Ibm Rational Collaborative Lifecycle Management 6.0.1Ibm Rational Collaborative Lifecycle Management 4.0.4Ibm Rational Collaborative Lifecycle Management 4.0.5Ibm Rational Collaborative Lifecycle Management 4.0.6Ibm Rational Collaborative Lifecycle Management 5.0Ibm Rational Collaborative Lifecycle Management 4.0Ibm Rational Collaborative Lifecycle Management 4.0.2Ibm Rational Collaborative Lifecycle Management 5.0.1Ibm Rational Collaborative Lifecycle Management 6.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook