CVE-2018-1764: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.

Security readout for executives and security teams

This is a cross-site scripting issue in IBM Rational Quality Manager. An authenticated user could place JavaScript into the web interface, potentially changing what another trusted user sees or causing credential disclosure during that session. It is medium severity, but relevant where RQM supports sensitive engineering, test, or compliance workflows. Exposure is limited to organizations running IBM Rational Quality Manager 5.0, 5.0.1, 5.0.2, or 6.0 through 6.0.6. Risk is higher when many users can create or modify web UI content viewed by privileged project or quality-management users. Treat this as a planned remediation item unless RQM is externally reachable or used by many semi-trusted users. The main business concern is credential exposure or workflow manipulation inside a trusted quality-management platform, not unauthenticated takeover. Mitigation focus: Identify all IBM Rational Quality Manager instances and versions.; Review IBM support advisory ibm10875318 for official remediation guidance.; Apply IBM-provided fixes or upgrades according to vendor instructions..

Prepared

Jun 1, 2026, 03:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.