[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAcBXE0I8c0aMuUVGCR4qT5bOcy2K3wnGg-4Dv1E5-ro":3,"g5a-ex:ibm\u002Frational_engineering_lifecycle_manager@*":209,"g5a-family:ibm\u002Frational_engineering_lifecycle_manager":211},{"success":4,"data":5},true,{"product":6,"versions":96,"topVulnerabilitiesByEpss":128,"kevVulnerabilities":186,"seoMetadata":187,"meta":206},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":95},"ibm","rational_engineering_lifecycle_manager",31,141,0,"2021-10-27",[14,18,20,23,25,28,30,33,36,38,40,42,44,46,49,51,54,57,60,63,66,69,72,75,78,81,83,86,88,90,93],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.0",7,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"1.0.0.1",{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},"4.0",3,{"version":24,"cve_count":16,"kev_count":11,"has_kev":17},"4.0.0",{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},"4.0.1",10,{"version":29,"cve_count":27,"kev_count":11,"has_kev":17},"4.0.2",{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},"4.0.3",34,{"version":34,"cve_count":35,"kev_count":11,"has_kev":17},"4.03",2,{"version":37,"cve_count":32,"kev_count":11,"has_kev":17},"4.0.4",{"version":39,"cve_count":35,"kev_count":11,"has_kev":17},"4.04",{"version":41,"cve_count":32,"kev_count":11,"has_kev":17},"4.0.5",{"version":43,"cve_count":35,"kev_count":11,"has_kev":17},"4.05",{"version":45,"cve_count":32,"kev_count":11,"has_kev":17},"4.0.6",{"version":47,"cve_count":48,"kev_count":11,"has_kev":17},"4.06",1,{"version":50,"cve_count":32,"kev_count":11,"has_kev":17},"4.0.7",{"version":52,"cve_count":53,"kev_count":11,"has_kev":17},"5.0",22,{"version":55,"cve_count":56,"kev_count":11,"has_kev":17},"5.0.0",21,{"version":58,"cve_count":59,"kev_count":11,"has_kev":17},"5.0.1",44,{"version":61,"cve_count":62,"kev_count":11,"has_kev":17},"5.0.2",40,{"version":64,"cve_count":65,"kev_count":11,"has_kev":17},"6.0",13,{"version":67,"cve_count":68,"kev_count":11,"has_kev":17},"6.0.0",19,{"version":70,"cve_count":71,"kev_count":11,"has_kev":17},"6.0.1",32,{"version":73,"cve_count":74,"kev_count":11,"has_kev":17},"6.0.2",50,{"version":76,"cve_count":77,"kev_count":11,"has_kev":17},"6.0.3",18,{"version":79,"cve_count":80,"kev_count":11,"has_kev":17},"6.0.4",12,{"version":82,"cve_count":11,"kev_count":11,"has_kev":17},"6.0.5",{"version":84,"cve_count":85,"kev_count":11,"has_kev":17},"6.0.6",42,{"version":87,"cve_count":85,"kev_count":11,"has_kev":17},"6.0.6.1",{"version":89,"cve_count":27,"kev_count":11,"has_kev":17},"7.0",{"version":91,"cve_count":92,"kev_count":11,"has_kev":17},"7.0.1",5,{"version":94,"cve_count":92,"kev_count":11,"has_kev":17},"7.0.2","Rational Engineering Lifecycle Manager by Ibm is a technology product with 31 tracked versions and 141 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},{"version":24,"cve_count":16,"kev_count":11,"has_kev":17},{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},{"version":29,"cve_count":27,"kev_count":11,"has_kev":17},{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},{"version":34,"cve_count":35,"kev_count":11,"has_kev":17},{"version":37,"cve_count":32,"kev_count":11,"has_kev":17},{"version":39,"cve_count":35,"kev_count":11,"has_kev":17},{"version":41,"cve_count":32,"kev_count":11,"has_kev":17},{"version":43,"cve_count":35,"kev_count":11,"has_kev":17},{"version":45,"cve_count":32,"kev_count":11,"has_kev":17},{"version":47,"cve_count":48,"kev_count":11,"has_kev":17},{"version":50,"cve_count":32,"kev_count":11,"has_kev":17},{"version":52,"cve_count":53,"kev_count":11,"has_kev":17},{"version":55,"cve_count":56,"kev_count":11,"has_kev":17},{"version":58,"cve_count":59,"kev_count":11,"has_kev":17},{"version":61,"cve_count":62,"kev_count":11,"has_kev":17},{"version":64,"cve_count":65,"kev_count":11,"has_kev":17},{"version":67,"cve_count":68,"kev_count":11,"has_kev":17},{"version":70,"cve_count":71,"kev_count":11,"has_kev":17},{"version":73,"cve_count":74,"kev_count":11,"has_kev":17},{"version":76,"cve_count":77,"kev_count":11,"has_kev":17},{"version":79,"cve_count":80,"kev_count":11,"has_kev":17},{"version":82,"cve_count":11,"kev_count":11,"has_kev":17},{"version":84,"cve_count":85,"kev_count":11,"has_kev":17},{"version":87,"cve_count":85,"kev_count":11,"has_kev":17},{"version":89,"cve_count":27,"kev_count":11,"has_kev":17},{"version":91,"cve_count":92,"kev_count":11,"has_kev":17},{"version":94,"cve_count":92,"kev_count":11,"has_kev":17},[129,137,145,151,157,161,164,169,175,181],{"cveId":130,"description":131,"publishedDate":132,"cvssScore":133,"cvssVersion":134,"severity":135,"isKev":17,"epssScore":136},"CVE-2017-1099","IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659.","2017-06-13",4.3,"v3.0","Medium",0.03433,{"cveId":138,"description":139,"publishedDate":140,"cvssScore":141,"cvssVersion":142,"severity":143,"isKev":17,"epssScore":144},"CVE-2019-4252","IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing \"dot dot\" sequences (\u002F..\u002F) to view arbitrary files on the system. IBM X-Force ID: 159883.","2019-06-27",7.5,"v3.1","High",0.03366,{"cveId":146,"description":147,"publishedDate":148,"cvssScore":149,"cvssVersion":142,"severity":143,"isKev":17,"epssScore":150},"CVE-2020-4495","IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted request to the REST API, an attacker could exploit this vulnerability to bypass access restrictions, and execute arbitrary actions with administrative privileges. IBM X-Force ID: 182114.","2021-06-02",8.8,0.02648,{"cveId":152,"description":153,"publishedDate":154,"cvssScore":155,"cvssVersion":134,"severity":143,"isKev":17,"epssScore":156},"CVE-2018-1846","IBM Rational Engineering Lifecycle Manager 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150945.","2018-11-02",7.1,0.01853,{"cveId":158,"description":159,"publishedDate":160,"cvssScore":155,"cvssVersion":134,"severity":143,"isKev":17,"epssScore":156},"CVE-2018-1607","IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 143797.","2018-09-25",{"cveId":162,"description":163,"publishedDate":160,"cvssScore":155,"cvssVersion":134,"severity":143,"isKev":17,"epssScore":156},"CVE-2018-1588","IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 143501.",{"cveId":165,"description":166,"publishedDate":167,"cvssScore":133,"cvssVersion":134,"severity":135,"isKev":17,"epssScore":168},"CVE-2017-1524","IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970.","2018-03-23",0.01783,{"cveId":170,"description":171,"publishedDate":172,"cvssScore":173,"cvssVersion":134,"severity":135,"isKev":17,"epssScore":174},"CVE-2018-1694","IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Rhapsody Design Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Software Architect Design Manager 5.0 through 5.02 and 6.0 through 6.0.1, IBM Rational Team Concert 5.0 through 5.02 and 6.0 through 6.0.6) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 145609.","2018-11-06",5.9,0.01755,{"cveId":176,"description":177,"publishedDate":178,"cvssScore":92,"cvssVersion":179,"severity":135,"isKev":17,"epssScore":180},"CVE-2014-3092","IBM Jazz Team Server, as used in Rational Collaborative Lifecycle Management; Rational Quality Manager 3.x before 3.0.1.6 iFix 3, 4.x before 4.0.7, and 5.x before 5.0.1; and other Rational products, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.","2014-09-12","v2",0.01667,{"cveId":182,"description":183,"publishedDate":184,"cvssScore":155,"cvssVersion":142,"severity":143,"isKev":17,"epssScore":185},"CVE-2021-20502","IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 198059.","2021-03-30",0.01551,[],{"title":188,"metaDescription":189,"keywords":190,"structuredData":191},"Rational Engineering Lifecycle Manager by Ibm - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Rational Engineering Lifecycle Manager by Ibm covering 31 versions with 141 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Rational Engineering Lifecycle Manager vulnerabilities, Rational Engineering Lifecycle Manager security, Rational Engineering Lifecycle Manager CVE, Ibm Rational Engineering Lifecycle Manager, Rational Engineering Lifecycle Manager threat intelligence, Ibm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":192,"@type":193,"name":194,"description":189,"url":195,"manufacturer":196,"applicationCategory":200,"softwareVersion":201,"mainEntity":202},"https:\u002F\u002Fschema.org","SoftwareApplication","Rational Engineering Lifecycle Manager","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fibm\u002Frational_engineering_lifecycle_manager",{"@type":197,"name":198,"url":199},"Organization","Ibm","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fibm","Security Software","31 versions tracked",{"@type":203,"name":204,"description":205,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Rational Engineering Lifecycle Manager Security Vulnerabilities","Security vulnerabilities affecting Rational Engineering Lifecycle Manager by Ibm",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":207,"apiVersion":208},"2026-10-28T15:33:46.894Z","3.0",{"rows":210,"total":11,"capped":17,"failed":11},[],[]]