Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ibm rational collaborative lifecycle management 6.0.6.1 vulnerabilities and exploits

(subscribe to this query)
3.5
CVSSv2
CVE-2020-4865
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 19...
Ibm Collaborative Lifecycle Management 6.0.2Ibm Collaborative Lifecycle Management 6.0.6Ibm Collaborative Lifecycle Management 6.0.6.1Ibm Engineering Insights 7.0Ibm Engineering Lifecycle Management 7.0Ibm Engineering Requirements Management Doors Next 6.0.2Ibm Engineering Requirements Management Doors Next 6.0.6Ibm Engineering Requirements Management Doors Next 6.0.6.1Ibm Engineering Requirements Management Doors Next 7.0Ibm Engineering Test Management 7.0.0Ibm Engineering Workflow Management 6.0.2Ibm Engineering Workflow Management 6.0.6Ibm Engineering Workflow Management 6.0.6.1Ibm Engineering Workflow Management 7.0Ibm Engineering Workflow Management 7.0.2Ibm Global Configuration ManagementIbm Rational Engineering Lifecycle Manager 6.0.2Ibm Rational Engineering Lifecycle Manager 6.0.6Ibm Rational Engineering Lifecycle Manager 6.0.6.1Ibm Rational Quality Manager 6.0.2Ibm Rational Quality Manager 6.0.6Ibm Rational Quality Manager 6.0.6.1
3.5
CVSSv2
CVE-2021-20357
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 19...
Ibm Collaborative Lifecycle Management 6.0.2Ibm Collaborative Lifecycle Management 6.0.6Ibm Collaborative Lifecycle Management 6.0.6.1Ibm Engineering Insights 7.0Ibm Engineering Lifecycle Management 7.0Ibm Engineering Requirements Management Doors Next 6.0.2Ibm Engineering Requirements Management Doors Next 6.0.6Ibm Engineering Requirements Management Doors Next 6.0.6.1Ibm Engineering Requirements Management Doors Next 7.0Ibm Engineering Test Management 7.0.0Ibm Engineering Workflow Management 6.0.2Ibm Engineering Workflow Management 6.0.6Ibm Engineering Workflow Management 6.0.6.1Ibm Engineering Workflow Management 7.0Ibm Engineering Workflow Management 7.0.2Ibm Global Configuration ManagementIbm Rational Engineering Lifecycle Manager 6.0.2Ibm Rational Engineering Lifecycle Manager 6.0.6Ibm Rational Engineering Lifecycle Manager 6.0.6.1Ibm Rational Quality Manager 6.0.2Ibm Rational Quality Manager 6.0.6Ibm Rational Quality Manager 6.0.6.1
3.5
CVSSv2
CVE-2020-4524
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 18...
Ibm Collaborative Lifecycle Management 6.0.2Ibm Collaborative Lifecycle Management 6.0.6Ibm Collaborative Lifecycle Management 6.0.6.1Ibm Engineering Insights 7.0Ibm Engineering Lifecycle Management 7.0Ibm Engineering Requirements Management Doors Next 6.0.2Ibm Engineering Requirements Management Doors Next 6.0.6Ibm Engineering Requirements Management Doors Next 6.0.6.1Ibm Engineering Requirements Management Doors Next 7.0Ibm Engineering Test Management 7.0.0Ibm Engineering Workflow Management 6.0.2Ibm Engineering Workflow Management 6.0.6Ibm Engineering Workflow Management 6.0.6.1Ibm Engineering Workflow Management 7.0Ibm Engineering Workflow Management 7.0.2Ibm Global Configuration ManagementIbm Rational Engineering Lifecycle Manager 6.0.2Ibm Rational Engineering Lifecycle Manager 6.0.6Ibm Rational Engineering Lifecycle Manager 6.0.6.1Ibm Rational Quality Manager 6.0.2Ibm Rational Quality Manager 6.0.6Ibm Rational Quality Manager 6.0.6.1
3.5
CVSSv2
CVE-2020-4547
IBM Jazz Foundation products could allow a remote malicious user to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch fur...
Ibm Collaborative Lifecycle Management 6.0.2Ibm Collaborative Lifecycle Management 6.0.6Ibm Collaborative Lifecycle Management 6.0.6.1Ibm Engineering Insights 7.0Ibm Engineering Lifecycle Management 7.0Ibm Engineering Requirements Management Doors Next 6.0.2Ibm Engineering Requirements Management Doors Next 6.0.6Ibm Engineering Requirements Management Doors Next 6.0.6.1Ibm Engineering Requirements Management Doors Next 7.0Ibm Engineering Test Management 7.0.0Ibm Engineering Workflow Management 6.0.2Ibm Engineering Workflow Management 6.0.6Ibm Engineering Workflow Management 6.0.6.1Ibm Engineering Workflow Management 7.0Ibm Engineering Workflow Management 7.0.2Ibm Global Configuration ManagementIbm Rational Engineering Lifecycle Manager 6.0.2Ibm Rational Engineering Lifecycle Manager 6.0.6Ibm Rational Engineering Lifecycle Manager 6.0.6.1Ibm Rational Quality Manager 6.0.2Ibm Rational Quality Manager 6.0.6Ibm Rational Quality Manager 6.0.6.1
4.3
CVSSv2
CVE-2020-4920
IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-For...
Ibm Collaborative Lifecycle Management 6.0.2Ibm Collaborative Lifecycle Management 6.0.6Ibm Collaborative Lifecycle Management 6.0.6.1Ibm Doors Next 7.0.0Ibm Doors Next 7.0.1Ibm Doors Next 7.0.2Ibm Engineering Insights 7.0.0Ibm Engineering Insights 7.0.1Ibm Engineering Insights 7.0.2Ibm Engineering Lifecycle Management 7.0.0Ibm Engineering Lifecycle Management 7.0.1Ibm Engineering Lifecycle Management 7.0.2Ibm Engineering Requirements Management Doors Next 6.0.2Ibm Engineering Requirements Management Doors Next 6.0.6Ibm Engineering Requirements Management Doors Next 6.0.6.1Ibm Engineering Test Management 7.0.0Ibm Engineering Test Management 7.0.1Ibm Engineering Test Management 7.0.2Ibm Engineering Workflow Management 7.0.0Ibm Engineering Workflow Management 7.0.1Ibm Engineering Workflow Management 7.0.2Ibm Rational Engineering Lifecycle Manager 6.0.2
4
CVSSv2
CVE-2020-4964
IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.
Ibm Collaborative Lifecycle Management 6.0.2Ibm Collaborative Lifecycle Management 6.0.6Ibm Collaborative Lifecycle Management 6.0.6.1Ibm Doors Next 7.0.0Ibm Doors Next 7.0.1Ibm Doors Next 7.0.2Ibm Engineering Insights 7.0.0Ibm Engineering Insights 7.0.1Ibm Engineering Insights 7.0.2Ibm Engineering Lifecycle Management 7.0.0Ibm Engineering Lifecycle Management 7.0.1Ibm Engineering Lifecycle Management 7.0.2Ibm Engineering Requirements Management Doors Next 6.0.2Ibm Engineering Requirements Management Doors Next 6.0.6Ibm Engineering Requirements Management Doors Next 6.0.6.1Ibm Engineering Test Management 7.0.0Ibm Engineering Test Management 7.0.1Ibm Engineering Test Management 7.0.2Ibm Engineering Workflow Management 7.0.0Ibm Engineering Workflow Management 7.0.1Ibm Engineering Workflow Management 7.0.2Ibm Rational Engineering Lifecycle Manager 6.0.2
5
CVSSv2
CVE-2020-4965
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an malicious user to decrypt highly sensitive information. IBM X-Force ID: 192422.
Ibm Rational Quality Manager 6.0.2Ibm Rational Team Concert 6.0.2Ibm Rational Engineering Lifecycle Manager 6.0.2Ibm Rhapsody Model Manager 6.0.6Ibm Rational Quality Manager 6.0.6Ibm Rational Quality Manager 6.0.6.1Ibm Rational Team Concert 6.0.6Ibm Rational Team Concert 6.0.6.1Ibm Collaborative Lifecycle Management 6.0.2Ibm Collaborative Lifecycle Management 6.0.6Ibm Collaborative Lifecycle Management 6.0.6.1Ibm Doors Next 7.0.1Ibm Doors Next 7.0.2Ibm Engineering Insights 7.0.1Ibm Engineering Lifecycle Management 7.0.1Ibm Engineering Lifecycle Management 7.0.2Ibm Engineering Requirements Management Doors Next 6.0.2Ibm Engineering Requirements Management Doors Next 6.0.6Ibm Engineering Requirements Management Doors Next 6.0.6.1Ibm Engineering Test Management 7.0.0Ibm Engineering Workflow Management 7.0.0Ibm Engineering Workflow Management 7.0.1
4
CVSSv2
CVE-2019-4084
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 up to and including 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384.
Ibm Rational Software Architect Design ManagerIbm Rational Collaborative Lifecycle ManagementIbm Rational Quality ManagerIbm Rational Team ConcertIbm Rational Doors Next GenerationIbm Rational Engineering Lifecycle ManagerIbm Rational Rhapsody Design Manager
5
CVSSv2
CVE-2019-4252
IBM Rational Collaborative Lifecycle Management 6.0 up to and including 6.0.6.1 could allow a remote malicious user to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary file...
Ibm Rational Software Architect Design ManagerIbm Rational Collaborative Lifecycle ManagementIbm Rational Quality ManagerIbm Rational Team ConcertIbm Rational Doors Next GenerationIbm Rational Engineering Lifecycle ManagerIbm Rational Rhapsody Design Manager
3.5
CVSSv2
CVE-2019-4249
IBM Rational Collaborative Lifecycle Management 6.0 up to and including 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc...
Ibm Rational Software Architect Design ManagerIbm Rational Collaborative Lifecycle ManagementIbm Rational Quality ManagerIbm Rational Team ConcertIbm Rational Doors Next GenerationIbm Rational Engineering Lifecycle ManagerIbm Rational Rhapsody Design Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook