Show filters
20 Total Results
Displaying 1-10 of 20
Sort by:
Attacker Value
Unknown
CVE-2015-4996
Disclosure Date: January 02, 2016 (last updated November 25, 2024)
IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover credentials via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-8925
Disclosure Date: March 25, 2015 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in ClearQuest Web in IBM Rational ClearQuest 7.1.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout or insert XSS sequences.
0
Attacker Value
Unknown
CVE-2013-3041
Disclosure Date: October 01, 2013 (last updated October 05, 2023)
The Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to obtain sensitive information from the client-server data stream via unspecified vectors associated with a "JSON hijacking attack."
0
Attacker Value
Unknown
CVE-2013-0598
Disclosure Date: September 28, 2013 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users.
0
Attacker Value
Unknown
CVE-2012-5757
Disclosure Date: March 21, 2013 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the Web Client in IBM Rational ClearQuest 7.1.x before 7.1.2.10 and 8.x before 8.0.0.6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
0
Attacker Value
Unknown
CVE-2012-5765
Disclosure Date: December 20, 2012 (last updated October 05, 2023)
The Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a SQL error message.
0
Attacker Value
Unknown
CVE-2012-4839
Disclosure Date: December 20, 2012 (last updated October 05, 2023)
The OSLC interface in the Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to conduct phishing attacks via a FRAME element.
0
Attacker Value
Unknown
CVE-2012-2164
Disclosure Date: August 17, 2012 (last updated October 04, 2023)
The Web client in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to bypass intended access restrictions, and use the Site Administration menu to modify system settings, via a parameter-tampering attack.
0
Attacker Value
Unknown
CVE-2012-2168
Disclosure Date: August 17, 2012 (last updated October 04, 2023)
IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to obtain sensitive stack-trace information from CM server error messages via an invalid parameter.
0
Attacker Value
Unknown
CVE-2012-2205
Disclosure Date: August 17, 2012 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest 7.1.x before 7.1.2.7 and 8.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a workspace query.
0
