Security Bulletin: IBM Engineering Lifecycle Management is vulnerable to HTML injection.(CVE-2021-20543)

Summary Summary guidance: The Jazz Team Server allows administrators to install custom process templates. These custom templates can optionally have custom HTML or JavaScript code in them. This is a feature that many customers use, but it is not without risk. We strongly encourage administrators ...

CVE-2021-20543

IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 198929...

CVE-2021-20543

CVE-2021-20543 affects IBM Jazz Team Server versions 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2. The issue is described as an HTML injection vulnerability that can allow a remote attacker to inject HTML code which, when viewed, is executed in the browser within the hosting site's security context. IBM...