CVE-2018-1763: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.

Security readout for executives and security teams

IBM Rational Quality Manager versions 5.0 through 6.0.6 have a cross-site scripting flaw in the web interface. A logged-in user could place JavaScript into the UI, potentially changing what another trusted user sees or exposing credentials inside that user’s session. Exposure is limited to organizations running IBM Rational Quality Manager 5.0, 5.0.1, 5.0.2, or 6.0 through 6.0.6. Risk is higher where many users can create or edit web UI content, or where RQM is reachable beyond tightly controlled internal networks. Treat this as a moderate-priority remediation item, especially if RQM supports regulated delivery, critical engineering workflows, or broad internal access. It is not described as actively exploited, but credential exposure inside trusted sessions can create meaningful business risk. Mitigation focus: Inventory IBM Rational Quality Manager versions across production and non-production environments.; Review IBM’s advisory for the vendor-supported fix or remediation path.; Restrict RQM access to trusted internal users until remediation is confirmed..

Prepared

Jun 1, 2026, 03:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.