Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

14 records

Vendor: IBM Component: Global Configuration Management Clear all filters
TI-2024-27820 CVE-2024-41773 · GHSA-58qg-j84p-48jq

IBM Global Configuration Management incorrect ownership assignment

Priority LOW 29

IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00282 Published 2024-08-20 No fix listed CWE-708
TI-2020-04095 CVE-2020-4856 · GHSA-fj94-8m6h-2j28

Cross-site scripting in IBM Rational Team Concert

Priority LOW 25

IBM Engineering products are vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00598 Published 2021-03-04 No fix listed CWE-79
TI-2020-03872 CVE-2020-4547 · GHSA-rx9g-gppv-rxr4

Clickjacking in IBM Engineering Workflow Management

Priority LOW 26

IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00831 Published 2021-01-27 No fix listed CWE-1021