ibm rational requirements composer

Name: ibm rational requirements composer
Brand: ibm

productUS

cpe:2.3:a:ibm:rational_requirements_composer:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical2high27medium9low

updated 2026-10-28

vulnerabilities (38)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-3092US	medium5.0	1.67% (77th)	—	no fix	2014-09-12	23 versions
CVE-2014-6129US	medium5.5	1.37% (72nd)	—	no fix	2015-03-18	13 versions
CVE-2014-6131US	medium4.0	1.33% (71st)	—	no fix	2015-03-18	13 versions
CVE-2015-0132US	high7.8	1.33% (71st)	—	no fix	2015-03-18	24 versions
CVE-2016-0219US	medium6.5	1.23% (69th)	—	no fix	2018-01-16	16 versions
CVE-2015-0113US	medium5.0	1.19% (68th)	—	no fix	2015-04-27	10 versions
CVE-2015-1928US	medium6.8	1.18% (68th)	—	no fix	2016-01-02	23 versions
CVE-2015-0112US	medium4.0	1.02% (63rd)	—	no fix	2015-06-07	25 versions
CVE-2018-1529US	medium5.4	0.97% (62nd)	—	no fix	2018-07-19	5.0.0 → 5.0.2
CVE-2014-0845US	medium4.9	0.95% (61st)	—	no fix	2014-03-04	15 versions
CVE-2016-9748US	medium4.3	0.94% (61st)	—	no fix	2017-02-08	= 4.0.7
CVE-2014-0846US	low3.5	0.94% (61st)	—	no fix	2014-03-04	15 versions
CVE-2017-1278US	medium5.4	0.87% (59th)	—	no fix	2017-06-12	7 versions
CVE-2015-7453US	medium6.1	0.85% (58th)	—	no fix	2018-03-15	2 versions
CVE-2013-3036US	medium4.9	0.85% (58th)	—	no fix	2013-09-12	4 versions
CVE-2014-0844US	low3.5	0.85% (58th)	—	no fix	2014-03-04	15 versions
CVE-2015-0130US	low3.5	0.78% (56th)	—	no fix	2015-07-20	10 versions
CVE-2015-0125US	low3.5	0.76% (55th)	—	no fix	2015-03-18	10 versions
CVE-2013-5404US	low3.5	0.76% (55th)	—	no fix	2013-12-10	18 versions
CVE-2017-1338US	medium5.4	0.73% (54th)	—	no fix	2017-08-18	10 versions
CVE-2017-1276US	medium5.4	0.73% (54th)	—	no fix	2017-06-12	7 versions
CVE-2017-1247US	medium5.4	0.73% (54th)	—	no fix	2017-06-12	7 versions
CVE-2017-1546US	medium5.4	0.70% (53rd)	—	no fix	2017-12-13	5 versions
CVE-2016-6060US	medium4.3	0.68% (52nd)	—	no fix	2017-02-15	7 versions
CVE-2017-1128US	medium5.4	0.65% (51st)	—	no fix	2017-02-08	11 versions
CVE-2017-1127US	medium5.4	0.65% (51st)	—	no fix	2017-02-08	11 versions
CVE-2015-7471US	medium4.8	0.63% (50th)	—	no fix	2018-03-15	2 versions
CVE-2013-3038US	medium5.4	0.56% (47th)	—	no fix	2013-09-12	4 versions
CVE-2015-1971US	medium4.3	0.55% (46th)	—	no fix	2016-01-03	23 versions
CVE-2017-1790US	medium5.4	0.54% (45th)	—	no fix	2018-04-12	3 versions
CVE-2016-6055US	medium5.4	0.51% (43rd)	—	no fix	2017-02-23	7 versions
CVE-2015-4962US	low3.5	0.45% (39th)	—	no fix	2016-01-03	23 versions
CVE-2015-0121US	low3.7	0.44% (38th)	—	no fix	2015-05-30	19 versions
CVE-2013-3039US	medium5.4	0.43% (37th)	—	no fix	2013-09-12	4 versions
CVE-2015-7440US	high7.8	0.31% (24th)	—	no fix	2018-03-15	2 versions
CVE-2015-4946US	low3.3	0.30% (23rd)	—	no fix	2016-01-03	23 versions
CVE-2013-3037US	medium4.4	0.29% (22nd)	—	no fix	2013-09-12	4 versions
CVE-2015-7449US	low3.3	0.13% (2nd)	—	no fix	2018-03-20	4.0.0 → 4.0.7

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')16 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor8 CVEs
CWE-264CWE-2644 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-611Improper Restriction of XML External Entity Reference2 CVEs
CWE-255CWE-2551 CVEs
CWE-287Improper Authentication1 CVEs
CWE-326Inadequate Encryption Strength1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE38 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan