Advisories · Technology

IBM Rational Quality Manager.

Every CVE that names IBM Rational Quality Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-5004 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products are vulnerable to cross-site scripting.
- IBM Rational Team Concert
- IBM Rational Quality Manager
Not analysed yet 28 Jul 2021
CVE-2020-4974 CVE record

CVSS 6.3 Medium

IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF).
- IBM Engineering Test Management
- IBM Rational Team Concert
Not analysed yet 28 Jul 2021
CVE-2021-29670 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
- IBM Engineering Test Management
- IBM Rational Rhapsody Model Manager
Not analysed yet 2 Jun 2021
CVE-2021-29668 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
- IBM Engineering Test Management
- IBM Rational Quality Manager
Not analysed yet 2 Jun 2021
CVE-2021-20371 CVE record

CVSS 4.3 Medium

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser.
- IBM Rational Collaborative Lifecycle Management
- IBM Rational Engineering Lifecycle Manager
Not analysed yet 2 Jun 2021
CVE-2021-20348 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).
- IBM Rational Rhapsody Model Manager
- IBM Rational Quality Manager
Not analysed yet 2 Jun 2021
CVE-2021-20347 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).
- IBM Rational DOORS Next Generation
- IBM Rational Engineering Lifecycle Manager
Not analysed yet 2 Jun 2021
CVE-2021-20346 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).
- IBM Rational Collaborative Lifecycle Management
- IBM Rational Engineering Lifecycle Manager
Not analysed yet 2 Jun 2021
CVE-2021-20345 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).
- IBM Rational Rhapsody Model Manager
- IBM Rational Quality Manager
Not analysed yet 2 Jun 2021
CVE-2021-20343 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).
- IBM Engineering Test Management
- IBM Rational Quality Manager
Not analysed yet 2 Jun 2021
CVE-2021-20338 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
- IBM Engineering Test Management
- IBM Rational Rhapsody Model Manager
Not analysed yet 2 Jun 2021
CVE-2020-5030 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
- IBM Rational Rhapsody Model Manager
- IBM Rational Quality Manager
Not analysed yet 2 Jun 2021
CVE-2020-4977 CVE record

CVSS 5.4 Medium

IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting.
- IBM Rational Quality Manager
- IBM Rational Rhapsody Model Manager
Not analysed yet 2 Jun 2021
CVE-2020-4732 CVE record

CVSS 4.3 Medium

IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions.
- IBM Rational DOORS Next Generation
- IBM Rational Engineering Lifecycle Manager
Not analysed yet 2 Jun 2021
CVE-2020-4495 CVE record

CVSS 8.8 High

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control.
- IBM Engineering Test Management
- IBM Rational Quality Manager
Not analysed yet 2 Jun 2021
CVE-2021-20519 CVE record

CVSS 5.4 Medium

IBM Jazz Team Server products are vulnerable to cross-site scripting.
- IBM Rational Quality Manager
- IBM Rational Team Concert
Not analysed yet 12 Apr 2021
CVE-2020-4965 CVE record

CVSS 5.9 Medium

IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
- IBM Rational DOORS Next Generation
- IBM Engineering Test Management
Not analysed yet 12 Apr 2021
CVE-2020-4964 CVE record

CVSS 4.3 Medium

IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users.
- IBM Rational Rhapsody Model Manager
- IBM Engineering Lifecycle Optimization
Not analysed yet 12 Apr 2021
CVE-2020-4920 CVE record

CVSS 6.4 Medium

IBM Jazz Team Server products are vulnerable to stored cross-site scripting.
- IBM Rational Engineering Lifecycle Manager
- IBM Rational Quality Manager
Not analysed yet 12 Apr 2021
CVE-2021-20351 CVE record

CVSS 5.4 Medium

IBM Engineering products are vulnerable to cross-site scripting.
- IBM Rational Team Concert
- IBM Engineering Workflow Management
Not analysed yet 4 Mar 2021
CVE-2021-20350 CVE record

CVSS 5.4 Medium

IBM Engineering products are vulnerable to cross-site scripting.
- IBM Rational Quality Manager
- IBM Rational Team Concert
Not analysed yet 4 Mar 2021
CVE-2021-20340 CVE record

CVSS 5.4 Medium

IBM Engineering products are vulnerable to cross-site scripting.
- IBM Rational DOORS Next Generation
- IBM Engineering Lifecycle Optimization
Not analysed yet 4 Mar 2021
CVE-2020-4975 CVE record

CVSS 5.4 Medium

IBM Engineering products are vulnerable to cross-site scripting.
- IBM Rational Team Concert
- IBM Engineering Workflow Management
Not analysed yet 4 Mar 2021
CVE-2020-4866 CVE record

CVSS 5.4 Medium

IBM Engineering products are vulnerable to cross-site scripting.
- IBM Engineering Workflow Management
- IBM Rational Team Concert
Not analysed yet 4 Mar 2021
CVE-2020-4863 CVE record

CVSS 6.4 Medium

IBM Engineering products are vulnerable to stored cross-site scripting.
- IBM Rational Quality Manager
- IBM Engineering Workflow Management
Not analysed yet 4 Mar 2021
CVE-2020-4857 CVE record

CVSS 6.4 Medium

IBM Engineering products are vulnerable to stored cross-site scripting.
- IBM Rational Quality Manager
- IBM Rational Team Concert
Not analysed yet 4 Mar 2021
CVE-2020-4856 CVE record

CVSS 6.4 Medium

IBM Engineering products are vulnerable to stored cross-site scripting.
- IBM Rational Team Concert
- IBM Engineering Workflow Management
Not analysed yet 4 Mar 2021
CVE-2021-20357 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products is vulnerable to cross-site scripting.
- IBM Rational DOORS Next Generation
- IBM Rational Quality Manager
Not analysed yet 27 Jan 2021
CVE-2020-4865 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products is vulnerable to cross-site scripting.
- IBM Engineering Lifecycle Optimization
- IBM Rational Rhapsody Design Manager
Not analysed yet 27 Jan 2021
CVE-2020-4855 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products is vulnerable to cross-site scripting.
- IBM Rational Collaborative Lifecycle Management
- IBM Rational Team Concert
Not analysed yet 27 Jan 2021
CVE-2020-4547 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim.
- IBM Engineering Workflow Management
- IBM Rational Engineering Lifecycle Manager
Not analysed yet 27 Jan 2021
CVE-2020-4524 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products is vulnerable to cross-site scripting.
- IBM Rational Collaborative Lifecycle Management
- IBM Rational Team Concert
Not analysed yet 27 Jan 2021
CVE-2020-4733 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products are vulnerable to cross-site scripting.
- IBM Rational Collaborative Lifecycle Management
- IBM Engineering Workflow Management
Not analysed yet 8 Jan 2021
CVE-2020-4697 CVE record

CVSS 5.4 Medium

IBM Jazz Foundation products are vulnerable to cross-site scripting.
- IBM Rational Team Concert
- IBM Rational Rhapsody Design Manager
Not analysed yet 8 Jan 2021
CVE-2020-4691 CVE record

CVSS 4.6 Medium

IBM Jazz Foundation Products are vulnerable to cross-site scripting.
- IBM Rational Rhapsody Design Manager
- IBM Rational Rhapsody Model Manager
Not analysed yet 8 Jan 2021
CVE-2020-4544 CVE record

CVSS 4.3 Medium

IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
- IBM Engineering Workflow Management
- IBM Rational Collaborative Lifecycle Management
Not analysed yet 8 Jan 2021
CVE-2020-4487 CVE record

CVSS 4.3 Medium

IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
- IBM Engineering Lifecycle Optimization
- IBM Rational DOORS Next Generation
Not analysed yet 8 Jan 2021
CVE-2020-4546 CVE record

CVSS 5.4 Medium

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.
- IBM Engineering Workflow Management
- IBM Rational Team Concert
Not analysed yet 2 Sept 2020
CVE-2020-4522 CVE record

CVSS 5.4 Medium

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.
- IBM Rational Rhapsody Design Manager
- IBM Rational Quality Manager
Not analysed yet 2 Sept 2020
CVE-2020-4445 CVE record

CVSS 5.4 Medium

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.
- IBM Rational Rhapsody Design Manager
- IBM Rational Quality Manager
Not analysed yet 2 Sept 2020
CVE-2019-4748 CVE record

CVSS 5.4 Medium

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.
- IBM Rational DOORS Next Generation
- IBM Engineering Workflow Management
Not analysed yet 16 Jul 2020
CVE-2019-4603 CVE record

CVSS 4.3 Medium

IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them appear as if they were created by another user.
- IBM Rational Quality Manager
Not analysed yet 8 Apr 2020
CVE-2019-4602 CVE record

CVSS 5.4 Medium

IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 is vulnerable to cross-site scripting.
- IBM Rational Quality Manager
Not analysed yet 8 Apr 2020
CVE-2019-4601 CVE record

CVSS 4.3 Medium

IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to obtain sensitive information from a stack trace that could aid in further attacks against the system.
- IBM Rational Quality Manager
Not analysed yet 8 Apr 2020
CVE-2018-1829 CVE record

CVSS 5.4 Medium

IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- IBM Rational Quality Manager
Not analysed yet 14 Mar 2019
CVE-2018-1825 CVE record

CVSS 5.4 Medium

IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- IBM Rational Quality Manager
Not analysed yet 14 Mar 2019
CVE-2018-1824 CVE record

CVSS 5.4 Medium

IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- IBM Rational Quality Manager
Not analysed yet 14 Mar 2019
CVE-2018-1823 CVE record

CVSS 5.4 Medium

IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- IBM Rational Quality Manager
Not analysed yet 14 Mar 2019
CVE-2018-1764 CVE record

CVSS 5.4 Medium

IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- IBM Rational Quality Manager
Not analysed yet 14 Mar 2019
CVE-2018-1763 CVE record

CVSS 5.4 Medium

IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- IBM Rational Quality Manager
Not analysed yet 14 Mar 2019
CVE-2018-1759 CVE record

CVSS 5.4 Medium

IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- IBM Rational Quality Manager
Not analysed yet 14 Mar 2019
CVE-2018-1694 CVE record

CVSS 5.9 Medium

IBM Rational Team Concert: IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02…
- IBM Rational Team Concert
- IBM Rational Software Architect Design Manager
Not analysed yet 6 Nov 2018
CVE-2018-1606 CVE record

CVSS 4.3 Medium

IBM Rational Team Concert: IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through…
- IBM Rational Team Concert
- IBM Rational Software Architect Design Manager
Not analysed yet 6 Nov 2018
CVE-2017-1609 CVE record

CVSS 5.4 Medium

IBM Quality Manager (RQM) 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting.
- IBM Rational Quality Manager
Not analysed yet 2 Nov 2018
CVE-2018-1604 CVE record

CVSS 5.4 Medium

IBM Rational Quality Manager: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable…
- IBM Rational Quality Manager
Not analysed yet 4 Oct 2018
CVE-2018-1603 CVE record

CVSS 5.4 Medium

IBM Rational Quality Manager: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable…
- IBM Rational Quality Manager
Not analysed yet 4 Oct 2018
CVE-2018-1602 CVE record

CVSS 5.4 Medium

IBM Rational Quality Manager: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable…
- IBM Rational Quality Manager
Not analysed yet 4 Oct 2018
CVE-2018-1692 CVE record

CVSS 5.4 Medium

IBM Rational Quality Manager: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable…
- IBM Rational Quality Manager
Not analysed yet 2 Oct 2018
CVE-2018-1691 CVE record

CVSS 5.4 Medium

IBM Rational Quality Manager: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable…
- IBM Rational Quality Manager
Not analysed yet 2 Oct 2018
CVE-2018-1605 CVE record

CVSS 5.4 Medium

IBM Rational Quality Manager: IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable…
- IBM Rational Quality Manager
Not analysed yet 2 Oct 2018