CVE-2014-0862

Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management ...

10.0 High

Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x before 3.0.1.6 iFix 2 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code via unknown vectors.

Exploit likelihood

4.25%Down 1.6 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2014-0862
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-0862
Updated: 2026-11-02

EUVDEUVD-2014-0892 No score

Record: EUVD-2014-0892
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mc86-9rhv-vp7f No score

Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management ...

Record: GHSA-mc86-9rhv-vp7f
Updated: 2026-11-02

OSVMGASA-2015-0240 No score

Updated rabbitmq-server packages fix security vulnerabilities

Updated rabbitmq-server package fixes security vulnerabilities:

RabbitMQ before 3.4.1 does not prevent /api/* from returning text/html error messages which could act as an XSS vector (CVE-2014-9649).

RabbitMQ before 3.4.1 has a response-splitting vulnerability in /api/downloads (CVE-2014-9650).

In RabbitMQ before 3.4.3, some user-controllable content was not properly HTML-escaped before being presented to a user in the management web UI. An attacker could publish a specially crafted message, policy name, or client version to execute arbitrary Javascript code on behalf of a user who was viewing messages, policies, or connected clients in the management UI. In all cases, the attacker needs a valid user account on the targetted RabbitMQ cluster (CVE-2015-0862).

The rabbitmq-server package has been updated to version 3.5.3, fixing these issues and several other bugs.

Record: MGASA-2015-0240
Updated: 2026-11-02

Affected products

ibm rational collaborative lifecycle management

Affected packages

Affected packages
Package	Affected	Fixed
`rabbitmq-server` Mageia:4 From an advisory covering 3 CVEs	before 3.5.3-1.mga4	3.5.3-1.mga4

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-0862 is a high vulnerability (CVSS 10.0) in Ibm Rational Collaborative Lifecycle Management, published March 2, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.25%, the 91st percentile. No source names a fixed version.