CVE-2017-1608

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 132928.

• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/132928Third Party Advisory, VDB Entry
• https://www-prd-trops.events.ibm.com/node/715749Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/132928Third Party Advisory, VDB Entry
• https://www-prd-trops.events.ibm.com/node/715749Broken Link, Third Party Advisory

Published

Jul 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16074crossenv was a malicious module published with the intent to…
• CVE-2017-16075http-proxy.js was a malicious module published with the inte…
• CVE-2017-16076proxy.js was a malicious module published with the intent to…
• CVE-2017-16077mongose was a malicious module published with the intent to …
• CVE-2017-16078shadowsock was a malicious module published with the intent …
• CVE-2017-16079smb was a malicious module published with the intent to hija…
• CVE-2017-16080nodesass was a malicious module published with the intent to…
• CVE-2017-16081cross-env.js was a malicious module published with the inten…
• CVE-2017-16082A remote code execution vulnerability was found within the p…
• CVE-2017-16083node-simple-router is a minimalistic router for Node. node-s…
• CVE-2017-16084list-n-stream is a server for static files to list and strea…
• CVE-2017-16085tinyserver2 is a webserver for static files. tinyserver2 is …