{"id":"CVE-2016-0326","aliases":["EUVD-2016-0361","GHSA-h52j-q63h-cw6p"],"status":"published","title":"IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before...","description":"IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted \"HTML request.\"","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01348,"percentile":0.71645,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-77"],"published":"2016-10-22T01:00:00Z","modified":"2026-06-17T00:37:20Z","products":[{"vendor":"ibm","product":"rational_collaborative_lifecycle_management"},{"vendor":"ibm","product":"rational_quality_manager"}],"references":[{"url":"http://www.securityfocus.com/bid/93824","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21989735","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-0326"},{"url":"https://github.com/advisories/GHSA-h52j-q63h-cw6p"}],"sources":{"cve":[{"id":"CVE-2016-0326","description":"IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted \"HTML request.\"","status":"published","published":"2016-10-22T01:00:00Z","modified":"2024-08-05T22:15:23.466Z","updated_at":"2026-11-02T14:33:37.446553Z"}],"euvd":[{"id":"EUVD-2016-0361","description":"IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted \"HTML request.\"","status":"published","published":"2016-10-22T01:00:00Z","modified":"2024-08-05T22:15:23Z","updated_at":"2026-11-03T02:23:01.859008Z"}],"ghsa":[{"id":"GHSA-h52j-q63h-cw6p","title":"IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before...","description":"IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted \"HTML request.\"","status":"published","published":"2022-05-17T03:43:31Z","modified":"2023-01-27T05:08:08Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:43:15.040364Z"}],"nvd":[{"id":"CVE-2016-0326","description":"IBM Rational Quality Manager (RQM) and Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.x before 4.0.7 iFix11, 5.x before 5.0.2 iFix17, and 6.x before 6.0.1 ifix3 allow remote authenticated users to execute arbitrary OS commands via a crafted \"HTML request.\"","status":"published","published":"2016-10-22T03:59:08.72Z","modified":"2026-06-17T00:37:20.433Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:03:31.485755Z"}]}}