Vulnerabilities (CVE)

Filtered by vendor Ibm Subscribe
Filtered by product Engineering Workflow Management
Total 45 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-4522 1 Ibm 10 Doors Next, Engineering Requirements Management Doors Next, Engineering Test Management and 7 more 2024-11-21 3.5 LOW 5.4 MEDIUM
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182397.
CVE-2020-4487 1 Ibm 13 Collaborative Lifecycle Management, Doors Next, Engineering Insights and 10 more 2024-11-21 4.0 MEDIUM 4.3 MEDIUM
IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181862.
CVE-2020-4445 1 Ibm 10 Doors Next, Engineering Requirements Management Doors Next, Engineering Test Management and 7 more 2024-11-21 3.5 LOW 5.4 MEDIUM
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181122.
CVE-2019-4748 1 Ibm 10 Collaborative Lifecycle Management, Doors Next, Engineering Lifecycle Manager and 7 more 2024-11-21 3.5 LOW 5.4 MEDIUM
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 173174.
CVE-2019-4747 1 Ibm 2 Engineering Workflow Management, Rational Team Concert 2024-11-21 3.5 LOW 5.4 MEDIUM
IBM Team Concert (RTC) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172887.