Vulnerability record · CVE-2014-0950 · published 20 April 2018

CVE-2014-0950: Ibm rational clearquest xml external entity (xxe) vulnerability

Ibm · Rational Clearquest

Multiple XML external entity (XXE) vulnerabilities in (1) CQWeb / CM Server, (2) ClearQuest Native client, (3) ClearQuest Eclipse client, and (4) ClearQuest Eclipse Designer components in IBM Rational ClearQuest 7.1.1 through 7.1.1.9, 7.1.2 through 7.1.2.13, 8.0.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92623.

7.1 CVSS 3.0 High EPSS 1.7% · top 24.2% CWE-611 · XML external entity (XXE)

7.1CVSS 3.0 base score, v2 5.5

1.7%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References

17 Jun 2026Last modified by NVD

Description

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Rational Clearquest Ibm

References

Link	Tags
http://www-01.ibm.com/support/docview.wss?uid=swg21675164	PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/92623	VDB EntryVendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21675164	PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/92623	VDB EntryVendor Advisory

Track CVE-2014-0950 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2010-4601Ibm rational clearquest vulnerabilityMultiple unspecified vulnerabilities in IBM Rational ClearQuest 7.0.x before 7.0.1.11, 7.1.1.x before 7.1.1.4, and 7.1.2.x before 7.1.2.1 allow attac…EPSS 1.2%29 Dec 2010 9.3CVE-2012-0708Ibm rational clearquest memory buffer overflow vulnerabilityHeap-based buffer overflow in the Ole API in the CQOle ActiveX control in cqole.dll in IBM Rational ClearQuest 7.1.1 before 7.1.1.9, 7.1.2 before 7.1…EPSS 31%22 Apr 2012 7.5CVE-2011-1390Ibm rational clearquest sql injection vulnerabilitySQL injection vulnerability in the Maintenance tool in IBM Rational ClearQuest 7.1.1.x before 7.1.1.9, 7.1.2.x before 7.1.2.6, and 8.x before 8.0.0.2…EPSS 2.0%14 May 2012 7.5CVE-2010-2517Ibm rational clearquest vulnerabilityMultiple unspecified vulnerabilities in IBM Rational ClearQuest before 7.1.1.02 have unknown impact and attack vectors, as demonstrated by an AppScan…EPSS 1.7%30 Jun 2010 7.5CVE-2008-5329Ibm rational clearquest vulnerabilityClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbitrary dat…EPSS 1.6%5 Dec 2008 7.5CVE-2007-5090Ibm rational clearquest permissions and access controls vulnerabilityUnspecified vulnerability in IBM Rational ClearQuest (CQ), when a Microsoft SQL Server or an IBM DB2 database is used, allows attackers to corrupt da…EPSS 1.9%26 Sep 2007 7.5CVE-2007-4368Ibm rational clearquest sql injection vulnerabilitySQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attackers to execute arbitrary SQL …EPSS 3.3%15 Aug 2007 6.9CVE-2011-1205Ibm rational clearcase memory buffer overflow vulnerabilityMultiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1…EPSS 0.37%29 Mar 2011

Source: NIST National Vulnerability Database (record CVE-2014-0950), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.