CVE-2017-1306

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125460.

• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/125460VDB Entry, Vendor Advisory
• https://www-prd-trops.events.ibm.com/node/715749Permissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/125460VDB Entry, Vendor Advisory
• https://www-prd-trops.events.ibm.com/node/715749Permissions Required

Published

Jul 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13053The BGP parser in tcpdump before 4.9.2 has a buffer over-rea…9.8
• CVE-2017-13054The LLDP parser in tcpdump before 4.9.2 has a buffer over-re…9.8
• CVE-2017-13055The ISO IS-IS parser in tcpdump before 4.9.2 has a buffer ov…9.8
• CVE-2017-13056The launchURL function in PDF-XChange Viewer 2.5 (Build 314.…
• CVE-2017-13058In ImageMagick 7.0.6-6, a memory leak vulnerability was foun…
• CVE-2017-13059In ImageMagick 7.0.6-6, a memory leak vulnerability was foun…
• CVE-2017-13060In ImageMagick 7.0.6-5, a memory leak vulnerability was foun…
• CVE-2017-13061In ImageMagick 7.0.6-5, a length-validation vulnerability wa…
• CVE-2017-13062In ImageMagick 7.0.6-6, a memory leak vulnerability was foun…
• CVE-2017-13063GraphicsMagick 1.3.26 has a heap-based buffer overflow vulne…
• CVE-2017-13064GraphicsMagick 1.3.26 has a heap-based buffer overflow vulne…
• CVE-2017-13065GraphicsMagick 1.3.26 has a NULL pointer dereference vulnera…