Vulnerabilities

TI-2023-03972 CVE-2023-4296 · GHSA-qj2q-gqrj-fh7g

PTC Codebeamer Cross site scripting

MEDIUM 41

If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00755 Published 2023-08-29 Fixed in 2.0 CWE-79

TI-2020-16159 CVE-2020-26515 · GHSA-gmf5-784h-mpjp

An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM…

LOW 33

An insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00514 Published 2021-06-08 No fix listed CWE-327

TI-2020-16161 CVE-2020-26517 · GHSA-rj65-wgxg-fc58

A cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through…

LOW 23

A cross-site scripting (XSS) issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00542 Published 2021-06-08 No fix listed CWE-79

TI-2020-16160 CVE-2020-26516 · GHSA-p86c-wqfp-64g4

A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.

LOW 39

A CSRF issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00732 Published 2021-06-08 No fix listed CWE-352

TI-2020-16158 CVE-2020-26513 · GHSA-7qwg-6759-84r6

An issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.

LOW 27

An issue was discovered in Intland codeBeamer ALM 10.x through 10.1.SP4.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00916 Published 2020-12-07 No fix listed CWE-611

TI-2019-14855 CVE-2019-20635 · GHSA-v2jv-fprq-92p2

codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java…

LOW 29

codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed fields.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00875 Published 2020-04-02 No fix listed CWE-470

TI-2019-14359 CVE-2019-19912 · GHSA-qvqq-rm9j-cq96

In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in…

LOW 23

In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00801 Published 2020-03-30 No fix listed CWE-79

TI-2019-14360 CVE-2019-19913 · GHSA-9ffq-j2xg-26w9

In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter.

LOW 23

In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00704 Published 2020-03-30 No fix listed CWE-79

Vulnerabilities

Filters