CVE-2012-5765

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The Web Client (aka CQ Web) in IBM Rational ClearQuest 7.1.2.x before 7.1.2.9 and 8.0.0.x before 8.0.0.5 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a SQL error message.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www-01.ibm.com/support/docview.wss?uid=swg1PM72905Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21620048Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80211
http://www-01.ibm.com/support/docview.wss?uid=swg1PM72905Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21620048Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/80211

Timeline

Published: Dec 20, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-57666.5Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authent CVE-2012-57676.5Unspecified vulnerability in the web interface on the IBM TS3500 Tape Library with firmware before C260 allows remote authenticated users to CVE-2012-57695.8IBM SPSS Modeler 14.0, 14.1, 14.2 through FP3, and 15.0 before FP2 allows remote attackers to read arbitrary files, and possibly send HTTP r CVE-2012-57705.8The SSL configuration in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.x before 7.2.1.4 supports the MD5 hash algorithm, w CVE-2012-57765.4Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php.CVE-2012-57776.8Eval injection vulnerability in the ReplaceListVars function in the template parser in e/class/connect.php in EmpireCMS 6.6 allows user-assi CVE-2012-57805.8The Amazon merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName f CVE-2012-57815.8Amazon Elastic Load Balancing API Tools does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or CVE-2012-57825.8Amazon Flexible Payments Service (FPS) PHP Library does not verify that the server hostname matches a domain name in the subject's Common Na CVE-2012-57835.8Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that CVE-2012-57845.8Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Servic CVE-2012-57855.8Apache Axis2/Java 1.6.2 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subj