CVE-2014-0950

Severity: high (CVSS 7.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-04-20 · updated 2026-06-17
Weakness: CWE-611

Description

Multiple XML external entity (XXE) vulnerabilities in (1) CQWeb / CM Server, (2) ClearQuest Native client, (3) ClearQuest Eclipse client, and (4) ClearQuest Eclipse Designer components in IBM Rational ClearQuest 7.1.1 through 7.1.1.9, 7.1.2 through 7.1.2.13, 8.0.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92623.

Affected products

IBM Rational ClearQuest: from 7.1.1 through 7.1.1.9; from 7.1.2 through 7.1.2.13; from 8.0.0 through 8.0.0.10; from 8.0.1 through 8.0.1.3

References

http://www-01.ibm.com/support/docview.wss?uid=swg21675164
https://exchange.xforce.ibmcloud.com/vulnerabilities/92623
http://www-01.ibm.com/support/docview.wss?uid=swg21675164
https://exchange.xforce.ibmcloud.com/vulnerabilities/92623

Get alerted when CVE-2014-0950 or the next vulnerability affects your stack