Vendors / Intland Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Intland records in CISA KEV No Intland vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 41
If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00755 · Published 2023-08-29 · Fixed in 2.0 CWE-79
Priority LOW 39
A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00732 · Published 2021-06-08 · No fix listed CWE-352
Priority LOW 33
An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00514 · Published 2021-06-08 · No fix listed CWE-327
Priority LOW 29
codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed fields.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00875 · Published 2020-04-02 · No fix listed CWE-470
Priority LOW 27
An issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00916 · Published 2020-12-07 · No fix listed CWE-611
Priority LOW 23
A cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00542 · Published 2021-06-08 · No fix listed CWE-79
Priority LOW 23
In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter.
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00704 · Published 2020-03-30 · No fix listed CWE-79
Priority LOW 23
In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an…
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00801 · Published 2020-03-30 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 3 5 0 0
THREATIST.IORead the docs