VendorsIBMrational_engineering_lifecycle_manager4.0
Vulnerabilities

IBM Rational Engineering Lifecycle Manager 4.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2016-9707
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000784.
Published 2017-03-31 · Modified
8.1EPSS 0.015
CVE-2017-1099
IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659.
Published 2017-06-13 · Modified
4.3EPSS 0.034
CVE-2016-9735
IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,
Published 2017-05-15 · Modified
4.3EPSS 0.007