CVE-2015-7453: IBM Rational Collaborative Lifecycle Management

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Quality Manager (RQM) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Team Concert (RTC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Requirements Composer (RRC) 3.0.x before 3.0.1.6 iFix7 Interim Fix 1 and 4.0.x before 4.0.7 iFix10; Rational DOORS Next Generation (RDNG) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Engineering Lifecycle Manager (RELM) 4.0.3, 4.0.4, 4.0.5, 4.0.6, and 4.0.7 before iFix10, 5.0.x before 5.0.2 iFix1, and 6.0.x before 6.0.2; Rational Rhapsody Design Manager (Rhapsody DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; and Rational Software Architect Design Manager (RSA DM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108296.

Affected products

• IBM Rational Collaborative Lifecycle Management: from 3.0.1, up to and including 6.0.1
• IBM Rational Doors Next Generation: from 4.0, up to and including 4.0.7; version 5.0 only; version 5.0.1 only; version 5.0.2 only; version 6.0.0 only; version 6.0.1 only
• IBM Rational Engineering Lifecycle Manager: from 4.0.3, up to and including 4.0.7; version 5.0 only; version 5.0.1 only; version 5.0.2 only; version 6.0 only; version 6.0.1 only
• IBM Rational Quality Manager: from 3.0, up to and including 3.0.1.6; from 4.0, up to and including 4.0.7; version 5.0 only; version 5.0.1 only; version 5.0.2 only; version 6.0 only; …
• IBM Rational Requirements Composer: from 3.0, up to and including 3.0.1.6; from 4.0, up to and including 4.0.7
• IBM Rational Rhapsody Design Manager: from 4.0, up to and including 4.0.7; version 5.0 only; version 5.0.1 only; version 5.0.2 only; version 6.0 only; version 6.0.1 only
• IBM Rational Software Architect Design Manager: from 4.0, up to and including 4.0.7; version 5.0 only; version 5.0.1 only; version 5.0.2 only; version 6.0 only; version 6.0.1 only
• IBM Rational Team Concert: from 3.0, up to and including 3.0.6; from 4.0, up to and including 4.0.7; version 5.0 only; version 5.0.1 only; version 5.0.2 only; version 6.0 only; …

Published 2018-03-15. Last modified 2026-06-17.