Priority LOW 29
IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user th…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00367 · Published 2022-07-18 · No fix listed CWE-352
Priority LOW 30
IBM Engineering Requirements Quality Assistant On-Premises (All versions) could allow an authenticated user to obtain sensitive information due to improper client side validation.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00858 · Published 2022-07-18 · No fix listed
Priority LOW 25
IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2022-07-18 · No fix listed CWE-79
Priority LOW 25
IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2022-07-18 · No fix listed CWE-79
Priority LOW 31
IBM Engineering Requirements Quality Assistant prior to 3.1.3 could allow an authenticated user to cause a denial of service.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01052 · Published 2022-03-18 · No fix listed
Priority LOW 39
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF).
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00592 · Published 2021-10-27 · No fix listed CWE-918
Priority LOW 25
IBM Jazz Foundation products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-28 · No fix listed CWE-79
Priority LOW 29
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF).
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00598 · Published 2021-07-28 · No fix listed CWE-918
Priority LOW 25
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-19 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Foundation Products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00557 · Published 2021-03-30 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Foundation Products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00557 · Published 2021-03-30 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Foundation Products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00557 · Published 2021-03-30 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Foundation Products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00557 · Published 2021-03-30 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Foundation Products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00557 · Published 2021-03-30 · No fix listed CWE-79
Priority LOW 34
IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.01551 · Published 2021-03-30 · No fix listed CWE-611
Priority LOW 25
IBM Jazz Foundation Products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00557 · Published 2021-03-30 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Foundation Products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00557 · Published 2021-03-30 · No fix listed CWE-79
Priority LOW 25
IBM Engineering products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00601 · Published 2021-03-04 · No fix listed CWE-79
Priority LOW 25
IBM Engineering products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00601 · Published 2021-03-04 · No fix listed CWE-79
Priority LOW 25
IBM Engineering products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00598 · Published 2021-03-04 · No fix listed CWE-79
Priority LOW 25
IBM Engineering products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00598 · Published 2021-03-04 · No fix listed CWE-79
Priority LOW 25
IBM Engineering products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00598 · Published 2021-03-04 · No fix listed CWE-79
Priority LOW 25
IBM Engineering products are vulnerable to stored cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00598 · Published 2021-03-04 · No fix listed CWE-79
Priority LOW 26
IBM Engineering products are vulnerable to stored cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00733 · Published 2021-03-04 · No fix listed CWE-79
Priority LOW 25
IBM Engineering products are vulnerable to stored cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00598 · Published 2021-03-04 · No fix listed CWE-79
Load more
THREATIST.IORead the docs