619 matches found
CVE-2021-20348
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 194597...
CVE-2021-20343
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194593...
CVE-2021-20371
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195516...
Server side request forgery (ssrf)
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194594...
CVE-2021-20371
CVE-2021-20371 describes an information-disclosure vulnerability in IBM Jazz Foundation and IBM Engineering products where error messages returned in the browser could reveal sensitive data. Affected products include IBM Jazz Foundation and Engineering Lifecycle Management suite (ELM) and related...
PT-2021-12263
Name of the Vulnerable Software and Affected Versions IBM Engineering Lifecycle Optimization - Publishing affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials...
CVE-2020-5030: Improper Neutralization of Input During Web Page Generation
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...
PT-2021-12291
Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation and IBM Engineering products affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...
PT-2021-18394
Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation and IBM Engineering products affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...
PT-2021-13895
Name of the Vulnerable Software and Affected Versions: IBM Jazz Foundation and IBM Engineering products affected versions not specified Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...
PT-2021-13898
Name of the Vulnerable Software and Affected Versions: IBM Jazz Foundation and IBM Engineering products affected versions not specified Description: The issue concerns server-side request forgery SSRF, which may allow an authenticated attacker to send unauthorized requests from the system. This...
PT-2021-13900
Name of the Vulnerable Software and Affected Versions: IBM Jazz Foundation and IBM Engineering products affected versions not specified Description: The issue allows an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating...
CVE-2021-29670: Improper Neutralization of Input During Web Page Generation
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID...
CVE-2021-20371: Generation of Error Message Containing Sensitive Information
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195516...
CVE-2021-20348: Server-Side Request Forgery (SSRF)
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 194597...
CVE-2021-20346: Server-Side Request Forgery (SSRF)
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194595...
CVE-2020-4977: Improper Neutralization of Input During Web Page Generation
IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
PT-2021-18395
Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation and IBM Engineering products affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials...
PT-2021-13899
Name of the Vulnerable Software and Affected Versions: IBM Jazz Foundation and IBM Engineering products affected versions not specified Description: The issue concerns server-side request forgery SSRF, which may allow an authenticated attacker to send unauthorized requests from the system. This...
PT-2021-13901
Name of the Vulnerable Software and Affected Versions: IBM Jazz Foundation and IBM Engineering products affected versions not specified Description: The issue allows an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating...