CVE-2016-9700
- EPSS 0.18%
- Published 05.07.2017 18:29:00
- Last modified 20.04.2025 01:37:25
IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack traces. IBM X-Force ID: 119528.
CVE-2016-9973
- EPSS 0.26%
- Published 13.06.2017 19:29:00
- Last modified 20.04.2025 01:37:25
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessio...
CVE-2017-1099
- EPSS 35.51%
- Published 13.06.2017 19:29:00
- Last modified 20.04.2025 01:37:25
IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659.
CVE-2017-1100
- EPSS 0.27%
- Published 13.06.2017 19:29:00
- Last modified 20.04.2025 01:37:25
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...
CVE-2017-1101
- EPSS 0.27%
- Published 13.06.2017 19:29:00
- Last modified 20.04.2025 01:37:25
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...
CVE-2017-1102
- EPSS 0.27%
- Published 13.06.2017 19:29:00
- Last modified 20.04.2025 01:37:25
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...
CVE-2017-1104
- EPSS 0.27%
- Published 13.06.2017 19:29:00
- Last modified 20.04.2025 01:37:25
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...
CVE-2016-9735
- EPSS 0.2%
- Published 15.05.2017 21:29:00
- Last modified 20.04.2025 01:37:25
IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,
CVE-2016-6035
- EPSS 0.26%
- Published 10.05.2017 14:29:00
- Last modified 20.04.2025 01:37:25
IBM Rational Quality Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trust...
CVE-2016-6037
- EPSS 0.15%
- Published 10.05.2017 14:29:00
- Last modified 20.04.2025 01:37:25
IBM Rational Team Concert (RTC) is vulnerable to HTML injection. A remote attacker with project administrator privileges could send a project that contains malicious HTML code, which when the project is viewed, would be executed in the victim's Web b...