VulnerabilityModified

CVE-2015-1928

MEDIUM 6.8EPSS 1.18%

Does this matter?

Lower severity and a low EPSS score (1.18%). Track it; it rarely justifies an emergency change on its own.

Description

Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.x before 6.0.0 IF4; Rational Quality Manager (RQM) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.0 before 6.0.0 IF4; Rational Team Concert (RTC) 3.x before 3.0.1.6 IF7, 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.0 before 6.0.0 IF4; Rational Requirements Composer (RRC) 3.x before 3.0.1.6 IF7 and 4.x before 4.0.7 IF9; Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF11, and 6.0 before 6.0.0 IF4; Rational Engineering Lifecycle Manager (RELM) 4.0.3 through 4.0.7, 5.0 through 5.0.2, and 6.0.0; Rational Rhapsody Design Manager (DM) 4.0 through 4.0.7, 5.0 through 5.0.2, and 6.0.0; and Rational Software Architect Design Manager (DM) 4.0 through 4.0.7, 5.0 through 5.0.2, and 6.0.0 allows remote authenticated users to conduct clickjacking attacks via a crafted web site.

CVSS 3.0: 6.8 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
EPSS: 1.18% probability · 66th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: ibm/rational quality manager · ibm/rational rhapsody design manager · ibm/rational requirements composer · ibm/rational engineering lifecycle manager · ibm/rational doors next generation · ibm/rational collaborative lifecycle management · ibm/rational software architect design manager · ibm/rational team concert
Source: psirt@us.ibm.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.