CVE-2018-1405

IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 138441.

• CWE-79

• http://www.ibm.com/support/docview.wss?uid=ibm10733078Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/138441VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=ibm10733078Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/138441VDB Entry, Vendor Advisory

Published

Oct 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-14044The RateTransposer::setChannels function in RateTransposer.c…
• CVE-2018-14045The FIRFilter::evaluateFilterMulti function in FIRFilter.cpp…
• CVE-2018-14046Exiv2 0.26 has a heap-based buffer over-read in WebPImage::d…
• CVE-2018-14047An issue has been found in PNGwriter 0.7.0. It is a SEGV in …
• CVE-2018-14048An issue has been found in libpng 1.6.34. It is a SEGV in th…6.5
• CVE-2018-14049An issue has been found in libwav through 2017-04-20. It is …
• CVE-2018-14050An issue has been found in libwav through 2017-04-20. It is …
• CVE-2018-14051The function wav_read in libwav.c in libwav through 2017-04-…
• CVE-2018-14052An issue has been found in libwav through 2017-04-20. It is …
• CVE-2018-14054A double free exists in the MP4StringProperty class in mp4pr…
• CVE-2018-14055ZNC before 1.7.1-rc1 does not properly validate untrusted li…
• CVE-2018-14056ZNC before 1.7.1-rc1 is prone to a path traversal flaw via .…