Known vulnerabilities in IBM Rational ClearQuest - page 3

Software CPE: cpe:2.3:a:ibm_corporation:ibm_rational_clearquest:*:*:*:*:*:*:*:*
Total vulnerabilities: 127
Public exploits: 9
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Rational ClearQuest IBM Rational ClearQuest is affected by 127 known vulnerabilities: 1 critical, 16 high, 71 medium, 39 low Critical High Medium Low

Vulnerabilities (127)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119149 - Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
CVE-2025-58098
CWE-97 Low
Available
No
- 04.12.2025 -
#VU119148 - Server-Side Request Forgery (SSRF)
CVE-2025-59775
CWE-918 Medium
No
No
- 04.12.2025 -
#VU119147 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-65082
CWE-74 Low
No
No
- 04.12.2025 -
#VU113185 - Expected Behavior Violation
CVE-2025-54090
CWE-440 Medium
No
No
- 23.07.2025 -
#VU113085 - Interpretation Conflict
CVE-2024-56339
CWE-436 Medium
No
No
- 21.07.2025 -
#VU113074 - Stack-based buffer overflow
CVE-2025-36097
CWE-121 High
No
No
- 18.07.2025 -
#VU112734 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-42516
CWE-113 Low
No
No
- 10.07.2025 -
#VU112733 - Server-Side Request Forgery (SSRF)
CVE-2024-43204
CWE-918 Low
No
No
- 10.07.2025 -
#VU112732 - Server-Side Request Forgery (SSRF)
CVE-2024-43394
CWE-918 Medium
No
No
- 10.07.2025 -
#VU111988 - Deserialization of Untrusted Data
CVE-2025-36038
CWE-502 Critical
No
No
- 27.06.2025 -
#VU111162 - Resource exhaustion
CVE-2025-48976
CWE-400 Medium
Available
No
- 16.06.2025 -
#VU109860 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-33104
CWE-79 Low
No
No
- 27.05.2025 -
#VU107856 - Server-Side Request Forgery (SSRF)
CVE-2025-27907
CWE-918 Medium
No
No
- 23.04.2025 -
#VU100521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45087
CWE-79 Medium
No
No
- 15.11.2024 -
#VU98757 - Out-of-bounds write
CVE-2024-9143
CWE-787 Low
No
No
9.1.0.8, 10.0.7 16.10.2024 SB20241016108
SB2024102219
SB2024102417
and 58 more
#VU96744 - Type confusion
CVE-2024-6119
CWE-843 Medium
No
No
9.1.0.8, 10.0.7 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU93424 - Out-of-bounds read
CVE-2024-5535
CWE-125 Low
Available
No
9.1.0.8, 10.0.7 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 154 more
#VU89861 - Use After Free
CVE-2024-4741
CWE-416 Medium
No
No
9.1.0.8, 10.0.7 29.05.2024 SB2024052912
SB2024060803
SB2024060804
and 87 more
#VU89624 - Resource Management Errors
CVE-2024-4603
CWE-399 Low
No
No
9.1.0.8, 10.0.7 17.05.2024 SB2024051715
SB2024052732
SB2024060735
and 65 more
#VU88211 - Resource exhaustion
CVE-2024-2511
CWE-400 Medium
No
No
9.1.0.8, 10.0.7 08.04.2024 SB2024040853
SB2024042960
SB2024051069
and 89 more


Showing elements 41 - 60 out of 127