Lucene search
+L

2775 matches found

CNVD
CNVD
added 2021/03/31 12:00 a.m.12 views

IBM Jazz Foundation Cross-Site Scripting Vulnerability (CNVD-2021-27805)

IBM Jazz Foundation is a next-generation collaboration platform for software delivery technology from International Business Machines Corporation IBM. IBM Jazz Foundation suffers from a cross-site scripting vulnerability that allows a user to embed arbitrary JavaScript code in the Web UI to chang...

5.4CVSS6.1AI score0.00502EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/30 5:15 p.m.9 views

CVE-2021-20518

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198437...

5.4CVSS5.9AI score0.00502EPSS
SaveExploits0References2
OSV
OSV
added 2021/03/30 5:15 p.m.11 views

CVE-2021-20504

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231...

5.4CVSS5.4AI score0.00502EPSS
SaveExploits0References2
OSV
OSV
added 2021/03/30 5:15 p.m.11 views

CVE-2021-20503

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198182...

5.4CVSS5.4AI score0.00502EPSS
SaveExploits0References2
Prion
Prion
added 2021/03/30 5:15 p.m.23 views

Cross site scripting

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231...

3.5CVSS5.1AI score0.00502EPSS
SaveExploits0References2Affected Software5
Prion
Prion
added 2021/03/30 5:15 p.m.29 views

Cross site scripting

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198182...

3.5CVSS5.1AI score0.00502EPSS
SaveExploits0References2Affected Software5
CNNVD
CNNVD
added 2021/03/30 12:00 a.m.10 views

IBM Jazz Foundation 跨站脚本漏洞

IBM Jazz Foundation is a next-generation collaboration platform for software delivery technology from International Business Machines Corporation IBM. IBM Jazz Foundation suffers from a cross-site scripting vulnerability that allows a user to embed arbitrary JavaScript code in the Web UI to chang...

5.4CVSS5.5AI score0.00502EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/03/30 12:00 a.m.11 views

IBM Jazz Foundation 跨站脚本漏洞

IBM Jazz Foundation is a next-generation collaboration platform for software delivery technology from International Business Machines Corporation IBM. IBM Jazz Foundation suffers from a cross-site scripting vulnerability that allows a user to embed arbitrary JavaScript code in the Web UI to chang...

5.4CVSS5.5AI score0.00502EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/03/29 12:00 a.m.7 views

CVE-2021-20504

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231...

5.4CVSS5.9AI score0.00502EPSS
SaveExploits0References3Affected Software4
ATTACKERKB
ATTACKERKB
added 2021/03/29 12:00 a.m.7 views

CVE-2021-20503

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198182...

5.4CVSS5.9AI score0.00502EPSS
SaveExploits0References3Affected Software4
ATTACKERKB
ATTACKERKB
added 2021/03/29 12:00 a.m.6 views

CVE-2020-4884

IBM UrbanCode Deploy UCD 6.2.7.9, 7.0.5.4, and 7.1.1.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 190908...

6.2CVSS5.8AI score0.00172EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/29 12:00 a.m.7 views

CVE-2021-20506

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231...

5.4CVSS5.9AI score0.00502EPSS
SaveExploits0References3Affected Software4
ATTACKERKB
ATTACKERKB
added 2021/03/29 12:00 a.m.6 views

CVE-2021-20447

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196623...

5.4CVSS5.9AI score0.00502EPSS
SaveExploits0References3Affected Software4
ATTACKERKB
ATTACKERKB
added 2021/03/17 9:30 a.m.11 views

CVE-2021-22860

EIC e-document system does not perform completed identity verification for sorting and filtering personnel data. The vulnerability allows remote attacker to obtain users’ credential information without logging in the system, and further acquire the privileged permissions and execute arbitrary...

9.8CVSS7.5AI score0.02558EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/03/11 12:00 a.m.29 views

IBM Engineering Requirements Management DOORS Next Cross-Site Scripting Vulnerability (CNVD-2021-17198)

IBM Engineering Requirements Management DOORS Next is a scalable solution from International Business Machines Corporation IBM. The solution helps you capture, track, analyze, and manage systems and advanced IT application development. A cross-site scripting vulnerability exists in IBM Engineerin...

6.4CVSS6AI score0.00539EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/11 12:00 a.m.18 views

IBM Tivoli Netcool/OMNIbus_GUI cross-site scripting vulnerability (CNVD-2021-17193)

IBM Tivoli Netcool/OMNIbusGUI is a graphical user interface for the IBM Tivoli Netcool/OMNIbus service level management system from IBM USA. A security vulnerability exists in IBM Tivoli Netcool/OMNIbusGUI that allows a user to embed arbitrary JavaScript code in the Web UI that could change the...

9.8CVSS6.7AI score0.95931EPSS
SaveExploits12References1
ATTACKERKB
ATTACKERKB
added 2021/03/10 12:00 a.m.13 views

CVE-2021-20336

IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

6.4CVSS6AI score0.00539EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/03/10 12:00 a.m.14 views

IBM Tivoli Netcool/OMNIbus_GUI 跨站脚本漏洞

IBM Tivoli Netcool/OMNIbusGUI is a graphical user interface for the IBM Tivoli Netcool/OMNIbus service level management system from IBM USA. A security vulnerability exists in IBM Tivoli Netcool/OMNIbusGUI that allows a user to embed arbitrary JavaScript code in the Web UI that could change the...

9.8CVSS7.5AI score0.95931EPSS
SaveExploits12References5
CNVD
CNVD
added 2021/03/05 12:00 a.m.16 views

IBM Engineering Test Management Cross-Site Scripting Vulnerability (CNVD-2021-14751)

IBM Engineering Test Management is a collaborative quality management solution that provides end-to-end test planning and test asset management with broad coverage from requirements to defects. A cross-site scripting vulnerability exists in IBM Engineering Test Management. An attacker could explo...

5.4CVSS6AI score0.00539EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/05 12:00 a.m.23 views

IBM Engineering Test Management Cross-Site Scripting Vulnerability (CNVD-2021-14749)

IBM Engineering Test Management is a collaborative quality management solution that provides end-to-end test planning and test asset management with broad coverage from requirements to defects. A cross-site scripting vulnerability exists in IBM Engineering Test Management. An attacker could explo...

6.4CVSS6AI score0.00539EPSS
SaveExploits0References1
Rows per page
Query Builder