VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Jun 7, 2015· Updated May 6, 2026

CVE-2015-0112

CVE-2015-0112

Description

Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Quality Manager (RQM) 2.0 through 2.0.1, 3.0 through 3.0.1.6, 4.0 through 4.0.7, and 5.0 through 5.0.2; Rational Team Concert (RTC) 2.0 through 2.0.0.2, 3.x before 3.0.1.6 IF6, 4.x before 4.0.7 IF5, and 5.x before 5.0.2 IF4; Rational Requirements Composer (RRC) 2.0 through 2.0.0.4, 3.x before 3.0.1.6 IF6, and 4.0 through 4.0.7; Rational DOORS Next Generation (RDNG) 4.x before 4.0.7 IF5 and 5.x before 5.0.2 IF4; Rational Engineering Lifecycle Manager (RELM) 1.0 through 1.0.0.1, 4.0.3 through 4.0.7, and 5.0 through 5.0.2; Rational Rhapsody Design Manager (DM) 3.0 through 3.0.1, 4.0 through 4.0.7, and 5.0 through 5.0.2; and Rational Software Architect Design Manager (RSA DM) 3.0 through 3.0.1, 4.0 through 4.0.7, and 5.0 through 5.0.2 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected products

135
  • IBM/Rational Collaborative Lifecycle Management18 versions
    cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1:*:*:*:*:*:*:*+ 17 more
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*
  • IBM/Rational Doors Next Generation10 versions
    cpe:2.3:a:ibm:rational_doors_next_generation:4.0.0:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*
  • IBM/Rational Engineering Lifecycle Manager9 versions
    cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:1.0:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:1.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*
  • IBM/Rational Quality Manager23 versions
    cpe:2.3:a:ibm:rational_quality_manager:2.0:*:*:*:*:*:*:*+ 22 more
    • cpe:2.3:a:ibm:rational_quality_manager:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:2.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:2.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*
  • IBM/Rational Requirements Composer25 versions
    cpe:2.3:a:ibm:rational_requirements_composer:2.0:*:*:*:*:*:*:*+ 24 more
    • cpe:2.3:a:ibm:rational_requirements_composer:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:2.0.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.0.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:3.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_requirements_composer:4.0.7:*:*:*:*:*:*:*
  • IBM/Rational Software Architect Design Manager13 versions
    cpe:2.3:a:ibm:rational_software_architect_design_manager:3.0.0:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:3.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:3.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*
  • IBM/Rational Team Concert24 versions
    cpe:2.3:a:ibm:rational_team_concert:2.0:*:*:*:*:*:*:*+ 23 more
    • cpe:2.3:a:ibm:rational_team_concert:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:2.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:2.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:3.0.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*
  • IBM/Rhapsody Design Manager13 versions
    cpe:2.3:a:ibm:rhapsody_design_manager:3.0.0:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:ibm:rhapsody_design_manager:3.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rhapsody_design_manager:3.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rhapsody_design_manager:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rhapsody_design_manager:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rhapsody_design_manager:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rhapsody_design_manager:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rhapsody_design_manager:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rhapsody_design_manager:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rhapsody_design_manager:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rhapsody_design_manager:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rhapsody_design_manager:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rhapsody_design_manager:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.