CVE-2017-1315

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125727.

• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/125727Third Party Advisory, VDB Entry
• https://www-prd-trops.events.ibm.com/node/715749Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/125727Third Party Advisory, VDB Entry
• https://www-prd-trops.events.ibm.com/node/715749Broken Link, Third Party Advisory

Published

Jul 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13144In ImageMagick before 6.9.7-10, there is a crash (rather tha…
• CVE-2017-13145In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the Re…6.5
• CVE-2017-13146In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there …8.8
• CVE-2017-13147In GraphicsMagick 1.3.26, an allocation failure vulnerabilit…
• CVE-2017-13148A denial of service vulnerability in the Android media frame…
• CVE-2017-13149An information disclosure vulnerability in the Android media…
• CVE-2017-13150An information disclosure vulnerability in the Android media…
• CVE-2017-13151A remote code execution vulnerability in the Android media f…
• CVE-2017-13152An information disclosure vulnerability in the Android media…
• CVE-2017-13153An elevation of privilege vulnerability in the Android media…
• CVE-2017-13154An elevation of privilege vulnerability in the Android media…
• CVE-2017-13156An elevation of privilege vulnerability in the Android syste…