CVE-2017-1564

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131764.

• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/131764Third Party Advisory, VDB Entry
• https://www-prd-trops.events.ibm.com/node/715749Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/131764Third Party Advisory, VDB Entry
• https://www-prd-trops.events.ibm.com/node/715749Broken Link, Third Party Advisory

Published

Jul 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15634TP-Link WVR, WAR and ER devices allow remote authenticated a…
• CVE-2017-15635TP-Link WVR, WAR and ER devices allow remote authenticated a…
• CVE-2017-15636TP-Link WVR, WAR and ER devices allow remote authenticated a…
• CVE-2017-15637TP-Link WVR, WAR and ER devices allow remote authenticated a…
• CVE-2017-15638The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linu…
• CVE-2017-15639tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attacke…
• CVE-2017-15640app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS v…
• CVE-2017-15642In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.…
• CVE-2017-15643An active network attacker (MiTM) can achieve remote code ex…
• CVE-2017-15644SSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link…
• CVE-2017-15645CSRF exists in Webmin 1.850. By sending a GET request to at/…
• CVE-2017-15646Webmin before 1.860 has XSS with resultant remote code execu…