CVE-2017-1691

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 134066.

• CWE-79

• https://exchange.xforce.ibmcloud.com/vulnerabilities/134066VDB Entry, Vendor Advisory
• https://www-prd-trops.events.ibm.com/node/715749Permissions Required
• https://exchange.xforce.ibmcloud.com/vulnerabilities/134066VDB Entry, Vendor Advisory
• https://www-prd-trops.events.ibm.com/node/715749Permissions Required

Published

Jul 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16904The Public tologin feature in admin.php in LvyeCMS through 3…
• CVE-2017-16905The DuoLingo TinyCards application before 1.0 for Android ha…
• CVE-2017-16906In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL f…
• CVE-2017-16907In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the C…
• CVE-2017-16908In Horde Groupware 5.2.19, there is XSS via the Name field d…
• CVE-2017-16909An error related to the "LibRaw::panasonic_load_raw()" funct…
• CVE-2017-16910An error within the "LibRaw::xtrans_interpolate()" function …
• CVE-2017-16911The vhci_hcd driver in the Linux Kernel before version 4.14.…
• CVE-2017-16912The "get_pipe()" function (drivers/usb/usbip/stub_rx.c) in t…
• CVE-2017-16913The "stub_recv_cmd_submit()" function (drivers/usb/usbip/stu…
• CVE-2017-16914The "stub_send_ret_submit()" function (drivers/usb/usbip/stu…
• CVE-2017-16919MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (…