CVE-2018-1758: IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.

Security readout for executives and security teams

IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1 can let an authenticated user place JavaScript into the web interface. If another user interacts with affected content, that script could run inside a trusted session and potentially expose credentials or alter page behavior. Exposure is limited to organizations running IBM Rational Collaborative Lifecycle Management 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, or 6.0.6.1, especially where project users can access the web UI. Treat this as a moderate business risk. It is not cited as actively exploited here, but it can affect credential confidentiality inside a trusted engineering lifecycle system. Remediate through IBM guidance, with priority based on web exposure and user population. Mitigation focus: Check IBM advisory guidance for the official fix or supported upgrade path.; Prioritize remediation for internet-accessible or broadly shared CLM instances.; Limit CLM web UI access to trusted users until vendor remediation is applied..

Prepared

Jun 1, 2026, 03:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.