CVE-2017-1621

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 133088.

• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/133088Third Party Advisory, VDB Entry
• https://www-prd-trops.events.ibm.com/node/715749Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/133088Third Party Advisory, VDB Entry
• https://www-prd-trops.events.ibm.com/node/715749Broken Link, Third Party Advisory

Published

Jul 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16204The jquey module exfiltrates sensitive data such as a user's…
• CVE-2017-16205The coffescript module exfiltrates sensitive data such as a …
• CVE-2017-16206The cofee-script module exfiltrates sensitive data such as a…
• CVE-2017-16207discordi.js is a malicious module based on the discord.js li…
• CVE-2017-16208dmmcquay.lab6 is a REST server. dmmcquay.lab6 is vulnerable …
• CVE-2017-16209enserver is a simple web server. enserver is vulnerable to a…
• CVE-2017-16210jn_jj_server is a static file server. jn_jj_server is vulner…
• CVE-2017-16211lessindex is a static file server. lessindex is vulnerable t…
• CVE-2017-16212ltt is a static file server. ltt is vulnerable to a director…
• CVE-2017-16213mfrserver is a simple file server. mfrserver is vulnerable t…
• CVE-2017-16214peiserver is a static file server. peiserver is vulnerable t…
• CVE-2017-16215sgqserve is a simple file server. sgqserve is vulnerable to …