IBM Rational Requirements Composer vulnerabilities

38 CVEs affecting IBM Rational Requirements Composer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1529, published 2018-07-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-3092, published 2014-09-12. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. IBM Jazz Team Server, as used in Rational Collaborative Lifecycle Management; Rational Quality Manager 3.x before 3.0.1.6 iFix 3, 4.x before 4.0.7, and 5.x before 5.0.1; and other Rational products,…
CVE-2014-6129, published 2015-03-18. Medium severity, CVSS 5.5. EPSS: 1.4% chance of exploitation in the next 30 days. IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before…
CVE-2014-6131, published 2015-03-18. Medium severity, CVSS 4.0. EPSS: 1.3% chance of exploitation in the next 30 days. IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before…
CVE-2015-0132, published 2015-03-18. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5 and 4.x before 4.0.7 iFix3 does…
CVE-2016-0219, published 2018-01-16. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote…
CVE-2015-0113, published 2015-04-27. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team Concert 4.0 through 4.0.7…
CVE-2015-1928, published 2016-01-02. Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days. Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4; Rational Quality Manager…
CVE-2015-0112, published 2015-06-07. Medium severity, CVSS 4.0. EPSS: 1% chance of exploitation in the next 30 days. Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Quality Manager (RQM) 2.0 through 2.0.1,…
CVE-2018-1529, published 2018-07-19. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. IBM Rational DOORS Next Generation 5.0 through 5.0.2, 6.0 through 6.0.5 and IBM Rational Requirements Composer 5.0 through 5.0.2 are vulnerable to cross-site scripting. This vulnerability allows…
CVE-2014-0845, published 2014-03-04. Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days. Open redirect vulnerability in IBM Rational Requirements Composer 3.x before 3.0.1.6 iFix2 and 4.x before 4.0.6, and Rational DOORS Next Generation 4.x before 4.0.6, allows remote authenticated users…

Latest

CVE-2017-1790, published 2018-04-12. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. IBM DOORS Next Generation (DNG/RRC) 5.0, 5.0.1, 5.0.2, and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
CVE-2015-7449, published 2018-03-20. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x before 6.0.1 iFix5, and 6.0.2 before iFix2; Rational Quality Manager (RQM) 4.0.x…
CVE-2015-7471, published 2018-03-15. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and…
CVE-2015-7453, published 2018-03-15. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and…
CVE-2015-7440, published 2018-03-15. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, and 6.0.x before 6.0.1 iFix4; Rational Quality…
CVE-2017-1546, published 2017-12-13. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the…
CVE-2017-1338, published 2017-08-18. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the…
CVE-2017-1278, published 2017-06-12. Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days. IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web…