Vulnerabilities

TI-2021-10504 CVE-2021-29844 · GHSA-89h6-69jq-v92c

Server-side request forgery in IBM Engineering Workflow Management

LOW 39

IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00592 Published 2021-10-27 No fix listed CWE-918

TI-2020-04023 CVE-2020-4733 · GHSA-wmxr-9qh6-cpq8

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 25

IBM Jazz Foundation products are vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00561 Published 2021-01-08 No fix listed CWE-79

TI-2020-03997 CVE-2020-4697 · GHSA-6r63-p37j-88jj

Cross-site scripting in IBM Rational Team Concert

LOW 25

IBM Jazz Foundation products are vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00561 Published 2021-01-08 No fix listed CWE-79

TI-2020-03992 CVE-2020-4691 · GHSA-8j82-3vp9-g4x4

Cross-site scripting in IBM Rational Rhapsody Design Manager

LOW 25

IBM Jazz Foundation Products are vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00561 Published 2021-01-08 No fix listed CWE-79

TI-2020-03869 CVE-2020-4544 · GHSA-hjq3-5xjw-j37q

Information disclosure through error messages in IBM Engineering Workflow Management

LOW 22

IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00994 Published 2021-01-08 No fix listed CWE-209

TI-2020-03832 CVE-2020-4487 · GHSA-vm7q-8rhw-2wwq

Information disclosure through error messages in IBM Engineering Lifecycle Optimization

LOW 22

IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00994 Published 2021-01-08 No fix listed CWE-209

TI-2020-03854 CVE-2020-4525 · GHSA-mww4-2jjr-hwq6

Cross-site scripting in IBM Rational Rhapsody Design Manager

LOW 25

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00561 Published 2020-08-04 No fix listed CWE-79

TI-2020-03784 CVE-2020-4410 · GHSA-7xmx-g36g-cqwh

IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to…

LOW 22

IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET request to read attachments on the server that they should not have access to.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00988 Published 2020-08-04 No fix listed

TI-2019-03166 CVE-2019-4252 · GHSA-mcq8-9jpg-3vg7

Path traversal in IBM Rational Collaborative Lifecycle Management

LOW 39

IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03366 Published 2019-06-27 No fix listed CWE-22

TI-2019-03165 CVE-2019-4250 · GHSA-8p4h-7g8h-grpj

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 25

IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0066 Published 2019-06-27 No fix listed CWE-79

TI-2019-03164 CVE-2019-4249 · GHSA-xj3c-66q4-9h7r

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 25

IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0066 Published 2019-06-27 No fix listed CWE-79

TI-2019-03058 CVE-2019-4084 · GHSA-6jjx-h773-4c26

IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through…

LOW 22

IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further att…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00984 Published 2019-06-27 No fix listed

TI-2019-03057 CVE-2019-4083 · GHSA-4hp4-j28r-4rf6

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 26

IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00666 Published 2019-06-27 No fix listed CWE-79

TI-2018-01651 CVE-2018-1893 · GHSA-6cf3-hrc5-w9g6

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 25

IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2019-06-27 No fix listed CWE-79

TI-2018-01650 CVE-2018-1892 · GHSA-hm7r-ph25-vrpw

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 25

IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2019-06-27 No fix listed CWE-79

TI-2018-01611 CVE-2018-1828 · GHSA-jqvr-399q-8r8w

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 25

IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2019-06-27 No fix listed CWE-79

TI-2018-01610 CVE-2018-1827 · GHSA-mqh2-fxp8-5mhg

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 25

IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2019-06-27 No fix listed CWE-79

TI-2018-01609 CVE-2018-1826 · GHSA-gq8q-rgh4-9fxh

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 25

IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2019-06-27 No fix listed CWE-79

TI-2018-01552 CVE-2018-1760 · GHSA-445v-c445-j3w2

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 25

IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2019-06-27 No fix listed CWE-79

TI-2018-01550 CVE-2018-1758 · GHSA-q3gg-x5gx-p8qg

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 25

IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2019-06-27 No fix listed CWE-79

TI-2018-01533 CVE-2018-1734 · GHSA-wqmh-c253-hpxh

Information disclosure in IBM Rational Collaborative Lifecycle Management

LOW 22

IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 discloses sensitive information in error messages that may be used by a malicious user to orchestrate further attacks.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0086 Published 2019-06-27 No fix listed CWE-200

TI-2018-01699 CVE-2018-1952 · GHSA-p3xx-84fp-3hm5

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 26

IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00968 Published 2019-03-14 No fix listed CWE-79

TI-2018-01669 CVE-2018-1916 · GHSA-3w93-xggv-pqrq

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 26

IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00968 Published 2019-03-14 No fix listed CWE-79

TI-2018-01498 CVE-2018-1688 · GHSA-2cjj-vh62-f62h

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 26

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00968 Published 2019-03-14 No fix listed CWE-79

TI-2018-01554 CVE-2018-1762 · GHSA-9ghw-g58v-3c6m

Cross-site scripting in IBM Rational Collaborative Lifecycle Management

LOW 26

IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00968 Published 2018-11-29 No fix listed CWE-79

Vulnerabilities

Filters