VIR Vulnerability Intelligence Relay

CVE-2014-0862

critical
Published 2014-03-02 · Modified 2026-04-29
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0

Description

Unspecified vulnerability in Jazz Team Server in IBM Rational Collaborative Lifecycle Management (CLM) 3.x before 3.0.1.6 iFix 2 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code via unknown vectors.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg21664566

Application impact
VendorProductVersionsFixed
ibmrational_collaborative_lifecycle_management3.0.0
ibmrational_collaborative_lifecycle_management3.0.1
ibmrational_collaborative_lifecycle_management3.0.1.1
ibmrational_collaborative_lifecycle_management3.0.1.2
ibmrational_collaborative_lifecycle_management3.0.1.3
ibmrational_collaborative_lifecycle_management3.0.1.4
ibmrational_collaborative_lifecycle_management3.0.1.5
ibmrational_collaborative_lifecycle_management3.0.1.6
ibmrational_collaborative_lifecycle_management4.0.0
ibmrational_collaborative_lifecycle_management4.0.1
ibmrational_collaborative_lifecycle_management4.0.2
ibmrational_collaborative_lifecycle_management4.0.3
ibmrational_collaborative_lifecycle_management4.0.4
ibmrational_collaborative_lifecycle_management4.0.5

References

Verify integrity in audit chain (admin only). AS-IS.