Priority LOW 30
IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00562 · Published 2021-10-27 · No fix listed CWE-312
Priority LOW 35
IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00982 · Published 2021-10-27 · No fix listed
Priority LOW 25
IBM Jazz Team Server products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-10-27 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Team Server products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-10-27 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Foundation products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-28 · No fix listed CWE-79
Priority LOW 29
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF).
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00598 · Published 2021-07-28 · No fix listed CWE-918
Priority LOW 25
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-19 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00495 · Published 2021-07-19 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00561 · Published 2020-09-02 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00561 · Published 2020-09-02 · No fix listed CWE-79
Priority LOW 25
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00561 · Published 2020-09-02 · No fix listed CWE-79
Priority LOW 39
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03366 · Published 2019-06-27 · No fix listed CWE-22
Priority LOW 25
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0066 · Published 2019-06-27 · No fix listed CWE-79
Priority LOW 25
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.0066 · Published 2019-06-27 · No fix listed CWE-79
Priority LOW 22
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further att…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00984 · Published 2019-06-27 · No fix listed
Priority LOW 26
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00666 · Published 2019-06-27 · No fix listed CWE-79
Priority LOW 25
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00586 · Published 2019-06-27 · No fix listed CWE-79
Priority LOW 25
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00586 · Published 2019-06-27 · No fix listed CWE-79
Priority LOW 25
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00586 · Published 2019-06-27 · No fix listed CWE-79
Priority LOW 25
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00586 · Published 2019-06-27 · No fix listed CWE-79
Priority LOW 25
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00586 · Published 2019-06-27 · No fix listed CWE-79
Priority LOW 25
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00586 · Published 2019-06-27 · No fix listed CWE-79
Priority LOW 25
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00586 · Published 2019-06-27 · No fix listed CWE-79
Priority LOW 22
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information in error messages that may be used by a malicious user to orchestrate further attacks.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0086 · Published 2019-06-27 · No fix listed CWE-200
Priority LOW 26
IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting.
CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00968 · Published 2019-03-14 · No fix listed CWE-79
Load more
THREATIST.IORead the docs