CVE-2018-1829: IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.

Security readout for executives and security teams

IBM Rational Quality Manager versions 5.0 through 6.0.6 have a cross-site scripting flaw. A logged-in user could place JavaScript into the web interface, and another user interacting with that content could have data exposed inside a trusted session, including possible credentials disclosure. Exposure is limited to organizations running IBM Rational Quality Manager 5.0, 5.0.1, 5.0.2, or 6.0 through 6.0.6. Risk is higher where many users can create or edit web UI content and where privileged users routinely review that content. Treat this as a moderate-priority remediation for affected RQM environments. It is not reported as actively exploited in the provided sources, but it can expose credentials or alter trusted workflows if an attacker has an account and can entice user interaction. Mitigation focus: Identify any IBM Rational Quality Manager deployments and their exact versions.; Review IBM advisory ibm10875318 for official remediation and supported upgrade paths.; Apply IBM-provided fixes or upgrades for affected versions..

Prepared

Jun 1, 2026, 03:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.