CVE-2017-1793: IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting.

Security readout for executives and security teams

IBM Rational Quality Manager has a web-interface cross-site scripting flaw in specific 5.x and 6.x versions. An authenticated user could place JavaScript into the UI, causing script execution in another user’s trusted session. The main business concern is credential exposure or unauthorized actions inside a quality-management system. Exposure is likely limited to organizations still running the listed IBM Rational Quality Manager versions, especially where authenticated users outside a tightly trusted group can access the Web UI. The sources do not identify other IBM products as affected. Treat as a moderate-priority remediation unless the RQM instance is widely accessible or handles sensitive engineering, testing, or release data. The risk is not wormable, but credential exposure inside a trusted session can support follow-on compromise. Mitigation focus: Review IBM advisory and X-Force entry for vendor-approved remediation.; Upgrade or apply IBM-provided fixes for affected Rational Quality Manager versions.; Restrict Web UI access to trusted users until remediation is complete..

Prepared

Jun 1, 2026, 03:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.