2016-01-02

2016-01-03

2016-01-04

All (3) Critical (1) High (2) Medium (10) Low (3)

CVE-2015-8509 Jan 03, 05:59 LOW POC Monitor

Template.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.16, 4.3.x and 4.4.x before 4.4.11, and 4.5.x and 5.0.x before 5.0.2 does not properly construct CSV files, which allows remote attackers to obtain. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Mozilla Bugzilla

NVD

CVSS 3.0

3.5

EPSS

0.3%

CVE-2015-4962 Jan 03, 05:59 LOW Monitor

Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1; Rational Quality Manager (RQM). Rated low severity (CVSS 3.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure IBM Rational Quality Manager Rational Team Concert Rational Requirements Composer +5

NVD

CVSS 3.0

3.5

EPSS

0.1%

CVE-2015-4946 Jan 03, 05:59 LOW Monitor

Rational LifeCycle Project Administration in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x and 4.x before 4.0.7 IF9, 5.x before 5.0.2 IF9, and 6.x before 6.0.1;. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation IBM Rational Quality Manager Rational Team Concert Rational Requirements Composer +5

NVD

CVSS 3.0

3.3

EPSS

0.1%