CVE-2017-1565

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131765.

• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/131765Third Party Advisory, VDB Entry
• https://www-prd-trops.events.ibm.com/node/715749Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/131765Third Party Advisory, VDB Entry
• https://www-prd-trops.events.ibm.com/node/715749Broken Link, Third Party Advisory

Published

Jul 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15644SSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link…
• CVE-2017-15645CSRF exists in Webmin 1.850. By sending a GET request to at/…
• CVE-2017-15646Webmin before 1.860 has XSS with resultant remote code execu…
• CVE-2017-15647On FiberHome routers, Directory Traversal exists in /cgi-bin…
• CVE-2017-15648In PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XS…
• CVE-2017-15649net/packet/af_packet.c in the Linux kernel before 4.13.6 all…
• CVE-2017-15650musl libc before 1.1.17 has a buffer overflow via crafted DN…
• CVE-2017-15651PRTG Network Monitor 17.3.33.2830 allows remote authenticate…
• CVE-2017-15652Artifex Ghostscript 9.22 is affected by: Obtain Information.…
• CVE-2017-15653Improper administrator IP validation after his login in the …
• CVE-2017-15654Highly predictable session tokens in the HTTPd server in all…
• CVE-2017-15655Multiple buffer overflow vulnerabilities exist in the HTTPd …