Ibm

Engineering Test Management

45 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2021-20343

  • EPSS 0.09%
  • Veröffentlicht 02.06.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 05:46:25

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating ...

5.5

CVE-2021-20346

  • EPSS 0.15%
  • Veröffentlicht 02.06.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 05:46:26

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating ...

5.5

CVE-2021-20347

  • EPSS 0.1%
  • Veröffentlicht 02.06.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 05:46:26

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating ...

5.5

CVE-2021-20348

  • EPSS 0.09%
  • Veröffentlicht 02.06.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 05:46:26

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating ...

6.5

CVE-2021-20371

  • EPSS 0.14%
  • Veröffentlicht 02.06.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 05:46:28

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195...

5.4

CVE-2021-29668

  • EPSS 0.21%
  • Veröffentlicht 02.06.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 06:01:36

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc...

5.4

CVE-2021-29670

  • EPSS 0.21%
  • Veröffentlicht 02.06.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 06:01:37

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc...

5.4

CVE-2021-20519

  • EPSS 0.16%
  • Veröffentlicht 12.04.2021 18:15:13
  • Zuletzt bearbeitet 21.11.2024 05:46:42

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tru...

7.5

CVE-2020-4965

  • EPSS 0.11%
  • Veröffentlicht 12.04.2021 18:15:12
  • Zuletzt bearbeitet 21.11.2024 05:33:29

IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.

4.3

CVE-2020-4964

  • EPSS 0.15%
  • Veröffentlicht 12.04.2021 18:15:12
  • Zuletzt bearbeitet 21.11.2024 05:33:28

IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.