TI-2021-10504 CVE-2021-29844 · GHSA-89h6-69jq-v92c
Server-side request forgery in IBM Engineering Workflow Management
Priority LOW 39
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF).
Vulnerabilities
141 records
TI-2021-10458 CVE-2021-29786 · GHSA-x2h8-3vcp-jmgr
Cleartext storage of sensitive information in IBM Engineering Lifecycle Optimization
Priority LOW 30
IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user.
TI-2021-10449 CVE-2021-29774 · GHSA-3wcm-vppv-p3q9
IBM Jazz Team Server products could allow an authenticated user to obtain elevated…
Priority LOW 35
IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations.
TI-2021-10401 CVE-2021-29713 · GHSA-9rxw-3mmq-x5xv
Cross-site scripting in IBM Rational Collaborative Lifecycle Management
Priority LOW 25
IBM Jazz Team Server products are vulnerable to cross-site scripting.
TI-2021-10372 CVE-2021-29673 · GHSA-rvcj-g4v7-99pp
Cross-site scripting in IBM Rational Team Concert
Priority LOW 25
IBM Jazz Team Server products are vulnerable to cross-site scripting.
TI-2020-04204 CVE-2020-5004 · GHSA-w6px-gr65-fm3g
Cross-site scripting in IBM Rational Team Concert
Priority LOW 25
IBM Jazz Foundation products are vulnerable to cross-site scripting.
TI-2020-04181 CVE-2020-4974 · GHSA-8xmv-482h-9xqg
Server-side request forgery in IBM Engineering Test Management
Priority LOW 29
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF).
TI-2021-03757 CVE-2021-20507 · GHSA-jx8c-f92c-p5qr
Cross-site scripting in IBM Engineering Workflow Management
Priority LOW 25
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
TI-2020-04221 CVE-2020-5031 · GHSA-j54r-cf4j-rg3q
Cross-site scripting in IBM Engineering Workflow Management
Priority LOW 25
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
TI-2021-10369 CVE-2021-29670 · GHSA-qx5v-c8m7-585r
Cross-site scripting in IBM Engineering Test Management
Priority LOW 25
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
TI-2021-10367 CVE-2021-29668 · GHSA-w9hf-6273-595m
Cross-site scripting in IBM Engineering Test Management
Priority LOW 25
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
TI-2021-03653 CVE-2021-20371 · GHSA-7732-95pg-6pp9
Information disclosure through error messages in IBM Rational Collaborative Lifecycle…
Priority LOW 31
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser.
TI-2021-03633 CVE-2021-20348 · GHSA-9592-7844-9gm7
Server-side request forgery in IBM Rational Rhapsody Model Manager
Priority LOW 25
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).
TI-2021-03632 CVE-2021-20347 · GHSA-pf5r-4cpx-xcxm
Server-side request forgery in IBM Rational DOORS Next Generation
Priority LOW 25
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).
TI-2021-03631 CVE-2021-20346 · GHSA-64pm-8v2v-3cx7
Server-side request forgery in IBM Rational Collaborative Lifecycle Management
Priority LOW 25
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).
TI-2021-03630 CVE-2021-20345 · GHSA-g8f8-x9rf-6jg3
Server-side request forgery in IBM Rational Rhapsody Model Manager
Priority LOW 25
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).
TI-2021-03629 CVE-2021-20343 · GHSA-2m3m-f775-94xc
Server-side request forgery in IBM Engineering Test Management
Priority LOW 25
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF).
TI-2021-03626 CVE-2021-20338 · GHSA-25p4-f7jc-m83q
Cross-site scripting in IBM Engineering Test Management
Priority LOW 25
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
TI-2020-04220 CVE-2020-5030 · GHSA-8mc9-pw6m-fph8
Cross-site scripting in IBM Rational Rhapsody Model Manager
Priority LOW 25
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.
TI-2020-04184 CVE-2020-4977 · GHSA-jhcg-x8v6-424p
Cross-site scripting in IBM Rational Quality Manager
Priority LOW 25
IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting.
TI-2020-04022 CVE-2020-4732 · GHSA-f76c-qgfq-83m9
IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to…
Priority LOW 30
IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions.
TI-2020-03838 CVE-2020-4495 · GHSA-5wv5-m844-q857
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass…
Priority MEDIUM 43
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control.
TI-2021-03765 CVE-2021-20519 · GHSA-977h-cgq2-v5cp
Cross-site scripting in IBM Rational Quality Manager
Priority LOW 26
IBM Jazz Team Server products are vulnerable to cross-site scripting.
TI-2020-04175 CVE-2020-4965 · GHSA-pxx3-r5wf-5fr5
Broken or risky cryptographic algorithm in IBM Rational DOORS Next Generation
Priority LOW 34
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
TI-2020-04174 CVE-2020-4964 · GHSA-p758-wxmr-xh9f
IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an…
Priority LOW 21
IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users.