CVE-2018-1549: IBM Rational Quality Manager 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to HTTP response splitt...

Security readout for executives and security teams

CVE-2018-1549 affects IBM Rational Quality Manager web interfaces. A crafted URL could cause split HTTP responses after a user clicks it, enabling follow-on risks such as cache poisoning, cross-site scripting, or sensitive information exposure. The CVE is medium severity, and the provided sources do not show known active exploitation. Exposure is limited to organizations still running the listed IBM Rational Quality Manager versions. Risk is higher where the application is reachable by users, integrated with shared caches or proxies, or exposed beyond tightly controlled internal networks. Treat this as a moderate web application risk. It is not listed as actively exploited in the provided evidence, but affected legacy IBM Rational Quality Manager deployments should be remediated because follow-on attacks may affect trust, data integrity, and confidentiality. Mitigation focus: Identify all IBM Rational Quality Manager deployments and versions.; Check IBM advisory guidance for the supported fix or upgrade path.; Prioritize remediation for internet-facing or broadly accessible deployments..

Prepared

Jun 1, 2026, 03:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.