Rational Clearquest (Ibm) - vulnerabilities (CVEs)

42 CVEs, 0 in the last 30 days, 188 known versions, newest CVE from 2024-07-17. Vendor: Ibm.

CVEs of Rational Clearquest

CVE-2024-28796 - CVSS 6.4 (medium), 2024-07-17: IBM ClearQuest (CQ) 9.1 through 9.1.0.6 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
CVE-2016-2922 - CVSS 5.9 (medium), 2018-08-13: IBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3 (CQ OSLC linkages, EmailRelay) fails to check the SSL certificate against the requested…
CVE-2014-0950 - CVSS 7.1 (high), 2018-04-20: Multiple XML external entity (XXE) vulnerabilities in (1) CQWeb / CM Server, (2) ClearQuest Native client, (3) ClearQuest Eclipse client, and (4) ClearQuest…
CVE-2015-4996 - CVSS 5.1 (medium), 2016-01-02: IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover credentials…
CVE-2014-8925 - CVSS 6.8 (medium), 2015-03-25: Cross-site request forgery (CSRF) vulnerability in ClearQuest Web in IBM Rational ClearQuest 7.1.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x…
CVE-2013-3041 - CVSS 4.3 (medium), 2013-10-01: The Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to obtain sensitive…
CVE-2013-0598 - CVSS 6.8 (medium), 2013-09-28: Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1…
CVE-2012-5757 - CVSS 4.3 (medium), 2013-03-21: Cross-site scripting (XSS) vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to…
CVE-2012-5765 - CVSS 5 (medium), 2012-12-20: The Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive…
CVE-2012-4839 - CVSS 4.3 (medium), 2012-12-20: The OSLC interface in the Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to…
CVE-2012-2168 - CVSS 4 (medium), 2012-08-17: IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM…
CVE-2012-2165 - CVSS 3.5 (low), 2012-08-17: IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3, when ClearQuest Authentication is enabled, allows remote authenticated users to read…
CVE-2012-2205 - CVSS 3.5 (low), 2012-08-17: Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to inject…
CVE-2012-2164 - CVSS 5.5 (medium), 2012-08-17: The Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to bypass intended access…
CVE-2012-2169 - CVSS 3.5 (low), 2012-08-17: Cross-site scripting (XSS) vulnerability in the file-upload functionality in the Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 allows remote…
CVE-2012-0744 - CVSS 5 (medium), 2012-08-17: IBM Rational ClearQuest 7.1.x through 7.1.2.7 and 8.x through 8.0.0.3 allows remote attackers to obtain potentially sensitive information via a request to a…
CVE-2011-1390 - CVSS 7.5 (high), 2012-05-14: SQL injection vulnerability in the Maintenance tool in IBM Rational ClearQuest 7.1.1.x before 7.1.1.9, 7.1.2.x before 7.1.2.6, and 8.x before 8.0.0.2 allows…
CVE-2012-0708 - CVSS 9.3 (critical), 2012-04-22: Heap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1.2.6, and…
CVE-2011-1205 - CVSS 6.9 (medium), 2011-03-29: Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1.4,…
CVE-2010-4601 - CVSS 10 (critical), 2010-12-29: Multiple unspecified vulnerabilities in IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 allow attackers to…
CVE-2010-4600 - CVSS 5 (medium), 2010-12-29: Dojo Toolkit, as used in the Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1, allows remote attackers to read cookies…
CVE-2010-4603 - CVSS 6.5 (medium), 2010-12-29: IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 does not prevent modification of back-reference fields,…
CVE-2010-4602 - CVSS 4 (medium), 2010-12-29: The Web client in IBM Rational ClearQuest 7.1.1.x before 7.1.1.4 and 7.1.2.x before 7.1.2.1 allows remote authenticated users to bypass "restricted user"…
CVE-2010-2517 - CVSS 7.5 (high), 2010-06-30: Multiple unspecified vulnerabilities in IBM Rational ClearQuest before 7.1.1.02 have unknown impact and attack vectors, as demonstrated by an AppScan report.
CVE-2009-4357 - CVSS 5 (medium), 2009-12-18: CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow…
CVE-2009-2212 - CVSS 5 (medium), 2009-06-25: The CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows attackers to discover a (1) username or (2) password via…
CVE-2009-2211 - CVSS 4.3 (medium), 2009-06-25: Cross-site scripting (XSS) vulnerability in the CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows remote attackers…
CVE-2008-5326 - CVSS 4.4 (medium), 2008-12-05: The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and…
CVE-2008-5329 - CVSS 7.5 (high), 2008-12-05: ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbitrary database by…
CVE-2008-5325 - CVSS 4.3 (medium), 2008-12-05: Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 allow remote attackers…
CVE-2008-5328 - CVSS 4.6 (medium), 2008-12-05: The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile…
CVE-2008-5324 - CVSS 4.3 (medium), 2008-12-05: Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 2007 before 2007D and 2008 before 2008B allow remote attackers to…
CVE-2008-5327 - CVSS 6.5 (medium), 2008-12-05: The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection…
CVE-2008-5330 - CVSS 4.3 (medium), 2008-12-05: Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before 7.0.0.4, and…
CVE-2008-3550 - CVSS 5 (medium), 2008-08-08: The CQWeb login page in IBM Rational ClearQuest 7.0.1 allows remote attackers to obtain potentially sensitive information (page source code) via a combination…
CVE-2007-4592 - CVSS 4.3 (medium), 2008-03-20: Multiple cross-site scripting (XSS) vulnerabilities in the web interface for IBM Rational ClearQuest before 2003.06.16 Patch 2008A, 7.0.0.2_iFix01, and…
CVE-2008-1287 - CVSS 5 (medium), 2008-03-11: IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is valid or invalid, which allows remote…
CVE-2008-1288 - CVSS 5 (medium), 2008-03-11: IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies.
CVE-2007-5090 - CVSS 7.5 (high), 2007-09-26: Unspecified vulnerability in IBM Rational ClearQuest (CQ), when a Microsoft SQL Server or an IBM DB2 database is used, allows attackers to corrupt data via…
CVE-2007-4368 - CVSS 7.5 (high), 2007-08-15: SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attackers to execute arbitrary SQL commands…
CVE-2007-1468 - CVSS 4.3 (medium), 2007-03-16: Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest (CQ) Web 7.0.0.0 allows remote attackers to inject arbitrary web script or HTML via an…
CVE-2005-2994 - CVSS 6.8 (medium), 2005-09-20: Unspecified vulnerability in the web client for IBM Rational ClearQuest 2002.05.00 and 2002.05.20, and 2003.06.00 through 2003.06.15 before SR5, allows remote…