CVE-2016-6036: IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting.

Security readout for executives and security teams

CVE-2016-6036 is a cross-site scripting issue in IBM Rational Quality Manager and related Rational Collaborative Lifecycle Management versions. A user could place JavaScript into the web interface, changing what other users see or do inside a trusted session. The reported impact is potential credential disclosure. Exposure is most likely where IBM Rational Quality Manager or Rational CLM versions listed in the CVE remain in use, especially where project users can submit or edit web UI content viewed by others. Treat this as a moderate legacy application risk. It is not listed as actively exploited in the supplied data, but exposed or business-critical RQM deployments should be checked because credential disclosure inside trusted sessions can affect engineering workflows. Mitigation focus: Check IBM advisory 2000784 for vendor fixes or upgrade guidance.; Identify and retire affected IBM RQM or Rational CLM versions.; Restrict write access to trusted project users only..

Prepared

Jun 13, 2026, 05:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.