# IBM Rational Quality Manager.

Every CVE that names IBM Rational Quality Manager among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [IBM Jazz Foundation products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-5004.md)
  `CVE-2020-5004` · CVE record: IBM Rational Team Concert and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 28 Jul 2021
- [IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF).](https://agentprime.io/advisories/CVE-2020-4974.md)
  `CVE-2020-4974` · CVE record: IBM Engineering Test Management and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 28 Jul 2021
- [IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-29670.md)
  `CVE-2021-29670` · CVE record: IBM Engineering Test Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Jun 2021
- [IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-29668.md)
  `CVE-2021-29668` · CVE record: IBM Engineering Test Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Jun 2021
- [IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser.](https://agentprime.io/advisories/CVE-2021-20371.md)
  `CVE-2021-20371` · CVE record: IBM Rational Collaborative Lifecycle Management and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 2 Jun 2021
- [IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).](https://agentprime.io/advisories/CVE-2021-20348.md)
  `CVE-2021-20348` · CVE record: IBM Rational Rhapsody Model Manager and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Jun 2021
- [IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).](https://agentprime.io/advisories/CVE-2021-20347.md)
  `CVE-2021-20347` · CVE record: IBM Rational DOORS Next Generation and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Jun 2021
- [IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).](https://agentprime.io/advisories/CVE-2021-20346.md)
  `CVE-2021-20346` · CVE record: IBM Rational Collaborative Lifecycle Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Jun 2021
- [IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).](https://agentprime.io/advisories/CVE-2021-20345.md)
  `CVE-2021-20345` · CVE record: IBM Rational Rhapsody Model Manager and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Jun 2021
- [IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).](https://agentprime.io/advisories/CVE-2021-20343.md)
  `CVE-2021-20343` · CVE record: IBM Engineering Test Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Jun 2021
- [IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20338.md)
  `CVE-2021-20338` · CVE record: IBM Engineering Test Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Jun 2021
- [IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-5030.md)
  `CVE-2020-5030` · CVE record: IBM Rational Rhapsody Model Manager and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Jun 2021
- [IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4977.md)
  `CVE-2020-4977` · CVE record: IBM Rational Quality Manager and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Jun 2021
- [IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions.](https://agentprime.io/advisories/CVE-2020-4732.md)
  `CVE-2020-4732` · CVE record: IBM Rational DOORS Next Generation and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 2 Jun 2021
- [IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control.](https://agentprime.io/advisories/CVE-2020-4495.md)
  `CVE-2020-4495` · CVE record: IBM Engineering Test Management and 4 more · CVSS 8.8 High · Not analysed yet · Published 2 Jun 2021
- [IBM Jazz Team Server products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20519.md)
  `CVE-2021-20519` · CVE record: IBM Rational Quality Manager and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 12 Apr 2021
- [IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.](https://agentprime.io/advisories/CVE-2020-4965.md)
  `CVE-2020-4965` · CVE record: IBM Rational DOORS Next Generation and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 12 Apr 2021
- [IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users.](https://agentprime.io/advisories/CVE-2020-4964.md)
  `CVE-2020-4964` · CVE record: IBM Rational Rhapsody Model Manager and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 12 Apr 2021
- [IBM Jazz Team Server products are vulnerable to stored cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4920.md)
  `CVE-2020-4920` · CVE record: IBM Rational Engineering Lifecycle Manager and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 12 Apr 2021
- [IBM Engineering products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20351.md)
  `CVE-2021-20351` · CVE record: IBM Rational Team Concert and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 4 Mar 2021
- [IBM Engineering products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20350.md)
  `CVE-2021-20350` · CVE record: IBM Rational Quality Manager and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 4 Mar 2021
- [IBM Engineering products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20340.md)
  `CVE-2021-20340` · CVE record: IBM Rational DOORS Next Generation and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 4 Mar 2021
- [IBM Engineering products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4975.md)
  `CVE-2020-4975` · CVE record: IBM Rational Team Concert and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 4 Mar 2021
- [IBM Engineering products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4866.md)
  `CVE-2020-4866` · CVE record: IBM Engineering Workflow Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 4 Mar 2021
- [IBM Engineering products are vulnerable to stored cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4863.md)
  `CVE-2020-4863` · CVE record: IBM Rational Quality Manager and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 4 Mar 2021
- [IBM Engineering products are vulnerable to stored cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4857.md)
  `CVE-2020-4857` · CVE record: IBM Rational Quality Manager and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 4 Mar 2021
- [IBM Engineering products are vulnerable to stored cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4856.md)
  `CVE-2020-4856` · CVE record: IBM Rational Team Concert and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 4 Mar 2021
- [IBM Jazz Foundation products is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2021-20357.md)
  `CVE-2021-20357` · CVE record: IBM Rational DOORS Next Generation and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 27 Jan 2021
- [IBM Jazz Foundation products is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4865.md)
  `CVE-2020-4865` · CVE record: IBM Engineering Lifecycle Optimization and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 27 Jan 2021
- [IBM Jazz Foundation products is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4855.md)
  `CVE-2020-4855` · CVE record: IBM Rational Collaborative Lifecycle Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 27 Jan 2021
- [IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim.](https://agentprime.io/advisories/CVE-2020-4547.md)
  `CVE-2020-4547` · CVE record: IBM Engineering Workflow Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 27 Jan 2021
- [IBM Jazz Foundation products is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4524.md)
  `CVE-2020-4524` · CVE record: IBM Rational Collaborative Lifecycle Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 27 Jan 2021
- [IBM Jazz Foundation products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4733.md)
  `CVE-2020-4733` · CVE record: IBM Rational Collaborative Lifecycle Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Jan 2021
- [IBM Jazz Foundation products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4697.md)
  `CVE-2020-4697` · CVE record: IBM Rational Team Concert and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 8 Jan 2021
- [IBM Jazz Foundation Products are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4691.md)
  `CVE-2020-4691` · CVE record: IBM Rational Rhapsody Design Manager and 4 more · CVSS 4.6 Medium · Not analysed yet · Published 8 Jan 2021
- [IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.](https://agentprime.io/advisories/CVE-2020-4544.md)
  `CVE-2020-4544` · CVE record: IBM Engineering Workflow Management and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 8 Jan 2021
- [IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.](https://agentprime.io/advisories/CVE-2020-4487.md)
  `CVE-2020-4487` · CVE record: IBM Engineering Lifecycle Optimization and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 8 Jan 2021
- [IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4546.md)
  `CVE-2020-4546` · CVE record: IBM Engineering Workflow Management and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Sept 2020
- [IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4522.md)
  `CVE-2020-4522` · CVE record: IBM Rational Rhapsody Design Manager and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Sept 2020
- [IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2020-4445.md)
  `CVE-2020-4445` · CVE record: IBM Rational Rhapsody Design Manager and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 2 Sept 2020
- [IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4748.md)
  `CVE-2019-4748` · CVE record: IBM Rational DOORS Next Generation and 4 more · CVSS 5.4 Medium · Not analysed yet · Published 16 Jul 2020
- [IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them appear as if they were created by another user.](https://agentprime.io/advisories/CVE-2019-4603.md)
  `CVE-2019-4603` · CVE record: IBM Rational Quality Manager · CVSS 4.3 Medium · Not analysed yet · Published 8 Apr 2020
- [IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2019-4602.md)
  `CVE-2019-4602` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 8 Apr 2020
- [IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to obtain sensitive information from a stack trace that could aid in further attacks against the system.](https://agentprime.io/advisories/CVE-2019-4601.md)
  `CVE-2019-4601` · CVE record: IBM Rational Quality Manager · CVSS 4.3 Medium · Not analysed yet · Published 8 Apr 2020
- [IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1829.md)
  `CVE-2018-1829` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 14 Mar 2019
- [IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1825.md)
  `CVE-2018-1825` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 14 Mar 2019
- [IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1824.md)
  `CVE-2018-1824` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 14 Mar 2019
- [IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1823.md)
  `CVE-2018-1823` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 14 Mar 2019
- [IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1764.md)
  `CVE-2018-1764` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 14 Mar 2019
- [IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1763.md)
  `CVE-2018-1763` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 14 Mar 2019
- [IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2018-1759.md)
  `CVE-2018-1759` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 14 Mar 2019
- [IBM Rational Team Concert: IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02…](https://agentprime.io/advisories/CVE-2018-1694.md)
  `CVE-2018-1694` · CVE record: IBM Rational Team Concert and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 6 Nov 2018
- [IBM Rational Team Concert: IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through…](https://agentprime.io/advisories/CVE-2018-1606.md)
  `CVE-2018-1606` · CVE record: IBM Rational Team Concert and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 6 Nov 2018
- [IBM Quality Manager (RQM) 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting.](https://agentprime.io/advisories/CVE-2017-1609.md)
  `CVE-2017-1609` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 2 Nov 2018
- [IBM Rational Quality Manager: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable…](https://agentprime.io/advisories/CVE-2018-1604.md)
  `CVE-2018-1604` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 4 Oct 2018
- [IBM Rational Quality Manager: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable…](https://agentprime.io/advisories/CVE-2018-1603.md)
  `CVE-2018-1603` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 4 Oct 2018
- [IBM Rational Quality Manager: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable…](https://agentprime.io/advisories/CVE-2018-1602.md)
  `CVE-2018-1602` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 4 Oct 2018
- [IBM Rational Quality Manager: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable…](https://agentprime.io/advisories/CVE-2018-1692.md)
  `CVE-2018-1692` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 2 Oct 2018
- [IBM Rational Quality Manager: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable…](https://agentprime.io/advisories/CVE-2018-1691.md)
  `CVE-2018-1691` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 2 Oct 2018
- [IBM Rational Quality Manager: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable…](https://agentprime.io/advisories/CVE-2018-1605.md)
  `CVE-2018-1605` · CVE record: IBM Rational Quality Manager · CVSS 5.4 Medium · Not analysed yet · Published 2 Oct 2018

Older: <https://agentprime.io/advisories/technology/ibm-rational-quality-manager.md?cursor=WyIyMDE4LTEwLTAyVDE1OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC0xNjA1Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ibm-rational-quality-manager>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ibm-rational-quality-manager/>. Everything for agents: <https://agentprime.io/llms.txt>.