Lucene search

CVE-2020-4855

🗓️ 27 Jan 2021 17:12:15Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 33 Views

IBM Jazz Foundation products vulnerable to cross-site scripting, allowing arbitrary JavaScript code embedding in Web UI

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
CNVD	IBM Jazz Foundation Cross-Site Scripting Vulnerability (CNVD-2021-09038)	3 Feb 202100:00	–	cnvd
NVD	CVE-2020-4855	27 Jan 202117:15	–	nvd
Prion	Cross site scripting	27 Jan 202117:15	–	prion
Cvelist	CVE-2020-4855	27 Jan 202116:15	–	cvelist
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites affect IBM Jazz Foundation and IBM Engineering products.	26 Jan 202119:54	–	ibm

Nvd

Vulners

Node

ibm collaborative_lifecycle_managementMatch6.0.2

ibm collaborative_lifecycle_managementMatch6.0.6

ibm collaborative_lifecycle_managementMatch6.0.6.1

ibm engineering_insightsMatch7.0

ibm engineering_lifecycle_managementMatch7.0

ibm engineering_requirements_management_doors_nextMatch6.0.2

ibm engineering_requirements_management_doors_nextMatch6.0.6

ibm engineering_requirements_management_doors_nextMatch6.0.6.1

ibm engineering_requirements_management_doors_nextMatch7.0

ibm engineering_test_managementMatch7.0.0

ibm engineering_workflow_managementMatch6.0.2

ibm engineering_workflow_managementMatch6.0.6

ibm engineering_workflow_managementMatch6.0.6.1

ibm engineering_workflow_managementMatch7.0

ibm engineering_workflow_managementMatch7.0.2

ibm global_configuration_management

ibm rational_engineering_lifecycle_managerMatch6.0.2

ibm rational_engineering_lifecycle_managerMatch6.0.6

ibm rational_engineering_lifecycle_managerMatch6.0.6.1

ibm rational_quality_managerMatch6.0.2

ibm rational_quality_managerMatch6.0.6

ibm rational_quality_managerMatch6.0.6.1

ibm rhapsody_design_managerMatch6.0.2

ibm rhapsody_design_managerMatch6.0.6

ibm rhapsody_design_managerMatch6.0.6.1

ibm rhapsody_design_managerMatch7.0

ibm rhapsody_model_managerMatch6.0.2

ibm rhapsody_model_managerMatch6.0.6

ibm rhapsody_model_managerMatch6.0.6.1

ibm rhapsody_model_managerMatch7.0

[
  {
    "product": "Rational Collaborative Lifecycle Management",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.2"
      },
      {
        "status": "affected",
        "version": "6.0.6"
      },
      {
        "status": "affected",
        "version": "6.0.6.1"
      }
    ]
  },
  {
    "product": "Rational Team Concert",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.2"
      },
      {
        "status": "affected",
        "version": "6.0.6"
      },
      {
        "status": "affected",
        "version": "6.0.6.1"
      }
    ]
  },
  {
    "product": "Rational Quality Manager",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.2"
      },
      {
        "status": "affected",
        "version": "6.0.6"
      },
      {
        "status": "affected",
        "version": "6.0.6.1"
      }
    ]
  },
  {
    "product": "Rational DOORS Next Generation",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.2"
      },
      {
        "status": "affected",
        "version": "6.0.6"
      },
      {
        "status": "affected",
        "version": "6.0.6.1"
      },
      {
        "status": "affected",
        "version": "7.0"
      }
    ]
  },
  {
    "product": "Engineering Lifecycle Optimization",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      }
    ]
  },
  {
    "product": "Rational Rhapsody Design Manager",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.2"
      },
      {
        "status": "affected",
        "version": "6.0.6"
      },
      {
        "status": "affected",
        "version": "6.0.6.1"
      }
    ]
  },
  {
    "product": "Engineering Test Management",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0.0"
      }
    ]
  },
  {
    "product": "Rational Engineering Lifecycle Manager",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      }
    ]
  },
  {
    "product": "Engineering Workflow Management",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "7.0.2"
      }
    ]
  },
  {
    "product": "Rational Rhapsody Model Manager",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.6"
      },
      {
        "status": "affected",
        "version": "6.0.6.1"
      },
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "6.0.2"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6408694
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/190457

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jan 2021 17:15Current

5.2Medium risk

Vulners AI Score5.2

CVSS23.5

CVSS35.4

EPSS0.00158

CWE-79