Known vulnerabilities in IBM Rational ClearQuest - page 4

Software CPE: cpe:2.3:a:ibm_corporation:ibm_rational_clearquest:*:*:*:*:*:*:*:*
Total vulnerabilities: 130
Public exploits: 9
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Rational ClearQuest IBM Rational ClearQuest is affected by 130 known vulnerabilities: 1 critical, 18 high, 71 medium, 40 low Critical High Medium Low

Vulnerabilities (130)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100521 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45087
CWE-79 Medium
No
No
- 15.11.2024 SB2024111525
SB2024112217
SB2024112515
and 6 more
#VU99760 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45086
CWE-611 Medium
No
No
- 05.11.2024 SB2024110544
SB2024110623
SB2024110629
and 8 more
#VU99280 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45071
CWE-79 Low
No
No
- 23.10.2024 SB2024102327
SB2024102343
SB2024102353
and 11 more
#VU98810 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-45072
CWE-611 Medium
No
No
- 18.10.2024 SB2024101807
SB2024101813
SB20241022399
and 11 more
#VU98136 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-45073
CWE-79 Low
No
No
- 08.10.2024 SB2024100833
SB2024100834
SB2024100942
and 12 more
#VU96744 - Type confusion
CVE-2024-6119
CWE-843 Medium
No
No
9.1.0.8, 10.0.7 03.09.2024 SB2024090364
SB2024090365
SB2024090384
and 99 more
#VU96059 - Exposure of sensitive information to an unauthorized actor
CVE-2023-50315
CWE-200 Low
No
No
- 15.08.2024 SB2024081567
SB2024082831
SB2024082846
and 9 more
#VU94637 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-37532
CWE-451 Medium
No
No
- 22.07.2024 SB2024072221
SB2024072222
SB2024072306
and 14 more
#VU94504 - Exposure of sensitive information to an unauthorized actor
CVE-2024-40725
CWE-200 Medium
Available
No
- 17.07.2024 SB20240717136
SB2024071854
SB2024071896
and 22 more
#VU94503 - Server-Side Request Forgery (SSRF)
CVE-2024-40898
CWE-918 High
Available
No
- 17.07.2024 SB20240717136
SB2024071896
SB2024081362
and 13 more
#VU93729 - Exposure of sensitive information to an unauthorized actor
CVE-2024-39884
CWE-200 Medium
No
No
- 03.07.2024 SB2024070342
SB2024070401
SB2024070890
and 21 more
#VU93396 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-35153
CWE-79 Medium
No
No
- 26.06.2024 SB2024062690
SB2024062708
SB2024062717
and 12 more
#VU89624 - Resource Management Errors
CVE-2024-4603
CWE-399 Low
No
No
9.1.0.8, 10.0.7 17.05.2024 SB2024051715
SB2024052732
SB2024060735
and 65 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727
CWE-476 Medium
No
No
9.1.0.7 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU85399 - Resource Management Errors
CVE-2023-6237
CWE-399 Low
No
No
9.1.0.7 15.01.2024 SB2024011522
SB2024012250
SB2024012612
and 53 more
#VU85170 - State Issues
CVE-2023-6129
CWE-371 Medium
No
No
9.1.0.7 09.01.2024 SB2024010929
SB2024012250
SB2024012612
and 69 more
#VU82894 - Resource Management Errors
CVE-2023-5678
CWE-399 Medium
No
No
9.1.0.7 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU45694 - Stack-based buffer overflow
CVE-2011-4599
CWE-121 High
No
No
10.0.6 14.08.2020 SB2012062107
SB2012011003
SB2012010901
and 2 more
#VU26149 - Integer overflow
CVE-2020-10531
CWE-190 High
No
No
10.0.6 17.03.2020 SB2020031801
SB2020031802
SB2020031803
and 40 more
#VU13051 - Heap-based Buffer Overflow
CVE-2014-8146
CWE-122 High
Available
No
10.0.6 28.05.2018 SB2018052513
SB2015051102
SB2015070705
and 4 more


Showing elements 61 - 80 out of 130