Vulnerabilities

IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001 through ) Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause…

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthorized access to the application.

IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 through Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 is vulnerable to an XML external entity injection (XX…

IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted.

IBM Engineering Lifecycle Management - Global Configuration Management 7.0.3 through 7.0.3 Interim Fix 017, and 7.1.0 through 7.1.0 Interim Fix 004 IBM Global Configuration Management is vulnerable to cross-site scriptin…

IBM Jazz Foundation (IBM Engineering Lifecycle Management 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) could disclose sensitive version information to a user that could be used in further attacks against the system.

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser.

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.

IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting.

IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions.

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control.

IBM Jazz Team Server products are vulnerable to cross-site scripting.

IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users.

IBM Jazz Team Server products are vulnerable to stored cross-site scripting.

IBM Jazz Foundation Products are vulnerable to cross-site scripting.

IBM Jazz Foundation Products are vulnerable to cross-site scripting.