[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAZzjk8W9ZsRNghSlCId4LcUQYfpcvva-fw4grVjZKCs":3,"g5a-ex:ibm\u002Frational_quality_manager@*":233,"g5a-family:ibm\u002Frational_quality_manager":235},{"success":4,"data":5},true,{"product":6,"versions":109,"topVulnerabilitiesByEpss":147,"kevVulnerabilities":211,"seoMetadata":212,"meta":231},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":108},"ibm","rational_quality_manager",37,202,0,"2022-08-29",[14,18,21,23,25,28,31,33,35,37,39,41,43,46,49,52,55,57,60,62,64,66,69,71,74,76,79,82,85,87,90,93,96,98,101,104,106],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2.0",13,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"2.0.0.1",9,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"2.0.0.2",{"version":24,"cve_count":16,"kev_count":11,"has_kev":17},"2.0.1",{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},"2.0.1.1",7,{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},"3.0",14,{"version":32,"cve_count":30,"kev_count":11,"has_kev":17},"3.0.1",{"version":34,"cve_count":30,"kev_count":11,"has_kev":17},"3.0.1.1",{"version":36,"cve_count":30,"kev_count":11,"has_kev":17},"3.0.1.2",{"version":38,"cve_count":30,"kev_count":11,"has_kev":17},"3.0.1.3",{"version":40,"cve_count":30,"kev_count":11,"has_kev":17},"3.0.1.4",{"version":42,"cve_count":30,"kev_count":11,"has_kev":17},"3.0.1.5",{"version":44,"cve_count":45,"kev_count":11,"has_kev":17},"3.0.1.6",21,{"version":47,"cve_count":48,"kev_count":11,"has_kev":17},"4.0",35,{"version":50,"cve_count":51,"kev_count":11,"has_kev":17},"4.0.0",12,{"version":53,"cve_count":54,"kev_count":11,"has_kev":17},"4.0.0.1",30,{"version":56,"cve_count":54,"kev_count":11,"has_kev":17},"4.0.0.2",{"version":58,"cve_count":59,"kev_count":11,"has_kev":17},"4.0.1",46,{"version":61,"cve_count":59,"kev_count":11,"has_kev":17},"4.0.2",{"version":63,"cve_count":59,"kev_count":11,"has_kev":17},"4.0.3",{"version":65,"cve_count":59,"kev_count":11,"has_kev":17},"4.0.4",{"version":67,"cve_count":68,"kev_count":11,"has_kev":17},"4.0.5",45,{"version":70,"cve_count":9,"kev_count":11,"has_kev":17},"4.0.6",{"version":72,"cve_count":73,"kev_count":11,"has_kev":17},"4.0.7",44,{"version":75,"cve_count":73,"kev_count":11,"has_kev":17},"5.0",{"version":77,"cve_count":78,"kev_count":11,"has_kev":17},"5.0.0",38,{"version":80,"cve_count":81,"kev_count":11,"has_kev":17},"5.0.1",81,{"version":83,"cve_count":84,"kev_count":11,"has_kev":17},"5.0.2",73,{"version":86,"cve_count":9,"kev_count":11,"has_kev":17},"6.0",{"version":88,"cve_count":89,"kev_count":11,"has_kev":17},"6.0.0",25,{"version":91,"cve_count":92,"kev_count":11,"has_kev":17},"6.0.1",62,{"version":94,"cve_count":95,"kev_count":11,"has_kev":17},"6.0.2",87,{"version":97,"cve_count":59,"kev_count":11,"has_kev":17},"6.0.3",{"version":99,"cve_count":100,"kev_count":11,"has_kev":17},"6.0.4",34,{"version":102,"cve_count":103,"kev_count":11,"has_kev":17},"6.0.5",29,{"version":105,"cve_count":68,"kev_count":11,"has_kev":17},"6.0.6",{"version":107,"cve_count":68,"kev_count":11,"has_kev":17},"6.0.6.1","Rational Quality Manager by Ibm is a technology product with 37 tracked versions and 202 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":16,"kev_count":11,"has_kev":17},{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},{"version":29,"cve_count":30,"kev_count":11,"has_kev":17},{"version":32,"cve_count":30,"kev_count":11,"has_kev":17},{"version":34,"cve_count":30,"kev_count":11,"has_kev":17},{"version":36,"cve_count":30,"kev_count":11,"has_kev":17},{"version":38,"cve_count":30,"kev_count":11,"has_kev":17},{"version":40,"cve_count":30,"kev_count":11,"has_kev":17},{"version":42,"cve_count":30,"kev_count":11,"has_kev":17},{"version":44,"cve_count":45,"kev_count":11,"has_kev":17},{"version":47,"cve_count":48,"kev_count":11,"has_kev":17},{"version":50,"cve_count":51,"kev_count":11,"has_kev":17},{"version":53,"cve_count":54,"kev_count":11,"has_kev":17},{"version":56,"cve_count":54,"kev_count":11,"has_kev":17},{"version":58,"cve_count":59,"kev_count":11,"has_kev":17},{"version":61,"cve_count":59,"kev_count":11,"has_kev":17},{"version":63,"cve_count":59,"kev_count":11,"has_kev":17},{"version":65,"cve_count":59,"kev_count":11,"has_kev":17},{"version":67,"cve_count":68,"kev_count":11,"has_kev":17},{"version":70,"cve_count":9,"kev_count":11,"has_kev":17},{"version":72,"cve_count":73,"kev_count":11,"has_kev":17},{"version":75,"cve_count":73,"kev_count":11,"has_kev":17},{"version":77,"cve_count":78,"kev_count":11,"has_kev":17},{"version":80,"cve_count":81,"kev_count":11,"has_kev":17},{"version":83,"cve_count":84,"kev_count":11,"has_kev":17},{"version":86,"cve_count":9,"kev_count":11,"has_kev":17},{"version":88,"cve_count":89,"kev_count":11,"has_kev":17},{"version":91,"cve_count":92,"kev_count":11,"has_kev":17},{"version":94,"cve_count":95,"kev_count":11,"has_kev":17},{"version":97,"cve_count":59,"kev_count":11,"has_kev":17},{"version":99,"cve_count":100,"kev_count":11,"has_kev":17},{"version":102,"cve_count":103,"kev_count":11,"has_kev":17},{"version":105,"cve_count":68,"kev_count":11,"has_kev":17},{"version":107,"cve_count":68,"kev_count":11,"has_kev":17},[148,156,163,171,177,182,188,193,199,206],{"cveId":149,"description":150,"publishedDate":151,"cvssScore":152,"cvssVersion":153,"severity":154,"isKev":17,"epssScore":155},"CVE-2010-4094","The Tomcat server in IBM Rational Quality Manager and Rational Test Lab Manager has a default password for the ADMIN account, which makes it easier for remote attackers to execute arbitrary code by leveraging access to the manager role.  NOTE: this might overlap CVE-2009-3548.","2010-10-26",5,"v2","Medium",0.64496,{"cveId":157,"description":158,"publishedDate":159,"cvssScore":160,"cvssVersion":161,"severity":154,"isKev":17,"epssScore":162},"CVE-2017-1099","IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659.","2017-06-13",4.3,"v3.0",0.03433,{"cveId":164,"description":165,"publishedDate":166,"cvssScore":167,"cvssVersion":168,"severity":169,"isKev":17,"epssScore":170},"CVE-2019-4252","IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing \"dot dot\" sequences (\u002F..\u002F) to view arbitrary files on the system. IBM X-Force ID: 159883.","2019-06-27",7.5,"v3.1","High",0.03366,{"cveId":172,"description":173,"publishedDate":174,"cvssScore":175,"cvssVersion":168,"severity":169,"isKev":17,"epssScore":176},"CVE-2020-4495","IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted request to the REST API, an attacker could exploit this vulnerability to bypass access restrictions, and execute arbitrary actions with administrative privileges. IBM X-Force ID: 182114.","2021-06-02",8.8,0.02648,{"cveId":178,"description":179,"publishedDate":180,"cvssScore":160,"cvssVersion":161,"severity":154,"isKev":17,"epssScore":181},"CVE-2017-1524","IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) could allow an authenticated user to obtain sensitive information from a specially crafted HTTP request that could be used to aid future attacks. IBM X-Force ID: 129970.","2018-03-23",0.01783,{"cveId":183,"description":184,"publishedDate":185,"cvssScore":186,"cvssVersion":161,"severity":154,"isKev":17,"epssScore":187},"CVE-2018-1694","IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Rhapsody Design Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Software Architect Design Manager 5.0 through 5.02 and 6.0 through 6.0.1, IBM Rational Team Concert 5.0 through 5.02 and 6.0 through 6.0.6) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 145609.","2018-11-06",5.9,0.01755,{"cveId":189,"description":190,"publishedDate":191,"cvssScore":152,"cvssVersion":153,"severity":154,"isKev":17,"epssScore":192},"CVE-2014-3092","IBM Jazz Team Server, as used in Rational Collaborative Lifecycle Management; Rational Quality Manager 3.x before 3.0.1.6 iFix 3, 4.x before 4.0.7, and 5.x before 5.0.1; and other Rational products, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.","2014-09-12",0.01667,{"cveId":194,"description":195,"publishedDate":196,"cvssScore":197,"cvssVersion":161,"severity":169,"isKev":17,"epssScore":198},"CVE-2016-9707","IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000784.","2017-03-31",8.1,0.01517,{"cveId":200,"description":201,"publishedDate":202,"cvssScore":203,"cvssVersion":153,"severity":204,"isKev":17,"epssScore":205},"CVE-2015-0124","Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix4, 4.x before 4.0.7 iFix3, and 5.x before 5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2015-0128.","2015-03-18",3.5,"Low",0.01402,{"cveId":207,"description":208,"publishedDate":202,"cvssScore":209,"cvssVersion":153,"severity":154,"isKev":17,"epssScore":210},"CVE-2014-6129","IBM Rational Jazz Team Server (JTS), as used in Rational Collaborative Lifecycle Management 3.x and 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Quality Manager 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational Team Concert 2.x and 3.x before 3.0.1.6 iFix5, 4.x before 4.0.7 iFix4, and 5.x before 5.0.2 iFix2; Rational DOORS Next Generation 4.x before 4.0.7 iFix4 and 5.x before 5.0.2 iFix2; Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5; and other products, allows remote authenticated users to delete the dashboards of arbitrary users via unspecified vectors.",5.5,0.01374,[],{"title":213,"metaDescription":214,"keywords":215,"structuredData":216},"Rational Quality Manager by Ibm - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Rational Quality Manager by Ibm covering 37 versions with 202 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Rational Quality Manager vulnerabilities, Rational Quality Manager security, Rational Quality Manager CVE, Ibm Rational Quality Manager, Rational Quality Manager threat intelligence, Ibm security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":217,"@type":218,"name":219,"description":214,"url":220,"manufacturer":221,"applicationCategory":225,"softwareVersion":226,"mainEntity":227},"https:\u002F\u002Fschema.org","SoftwareApplication","Rational Quality Manager","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fibm\u002Frational_quality_manager",{"@type":222,"name":223,"url":224},"Organization","Ibm","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fibm","Security Software","37 versions tracked",{"@type":228,"name":229,"description":230,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Rational Quality Manager Security Vulnerabilities","Security vulnerabilities affecting Rational Quality Manager by Ibm",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":232,"apiVersion":29},"2026-10-28T16:15:13.596Z",{"rows":234,"total":11,"capped":17,"failed":11},[],[]]