# Ibm Rational Quality Manager


- [CVE-2020-4495](https://insights.sbomify.com/CVE-2020-4495/): Auth bypass in Engineering Lifecycle Optimization (high 8.8)
- [CVE-2016-0326](https://insights.sbomify.com/CVE-2016-0326/): Command injection in n/a (high 8.8)
- [CVE-2017-1103](https://insights.sbomify.com/CVE-2017-1103/): XML external entity in Rational Collaborative Lifecycle Management (high 8.1)
- [CVE-2016-9707](https://insights.sbomify.com/CVE-2016-9707/): XML external entity in Rational Collaborative Lifecycle Management (high 8.1)
- [CVE-2015-7440](https://insights.sbomify.com/CVE-2015-7440/): Privilege escalation in n/a (high 7.8)
- [CVE-2015-1928](https://insights.sbomify.com/CVE-2015-1928/): Other in n/a (medium 6.8)
- [CVE-2019-4252](https://insights.sbomify.com/CVE-2019-4252/): Path traversal in Rational Collaborative Lifecycle Management (medium 6.5)
- [CVE-2017-1700](https://insights.sbomify.com/CVE-2017-1700/): Missing authorization in Rational Collaborative Lifecycle Management (medium 6.5)
- [CVE-2016-0219](https://insights.sbomify.com/CVE-2016-0219/): XML external entity in n/a (medium 6.5)
- [CVE-2020-4920](https://insights.sbomify.com/CVE-2020-4920/): Cross-site scripting in Engineering Lifecycle Optimization (medium 6.4)
- [CVE-2020-4856](https://insights.sbomify.com/CVE-2020-4856/): Cross-site scripting in Engineering Lifecycle Optimization (medium 6.4)
- [CVE-2020-4857](https://insights.sbomify.com/CVE-2020-4857/): Cross-site scripting in Engineering Lifecycle Optimization (medium 6.4)

---
From sbomify Insights: https://insights.sbomify.com/products/ibm/rational-quality-manager/