Lucene search
+L

571 matches found

OSV
OSV
•added 2021/03/04 7:15 p.m.•15 views

CVE-2020-4975

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192435...

5.4CVSS5.9AI score0.00598EPSS
SaveExploits0References2
OSV
OSV
•added 2021/03/04 7:15 p.m.•14 views

CVE-2020-4857

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190460...

5.4CVSS6.2AI score0.00733EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•4 views

CVE-2020-4856: Improper Neutralization of Input During Web Page Generation

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190459...

6.4CVSS5.7AI score0.00598EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•6 views

CVE-2021-20351: Improper Neutralization of Input During Web Page Generation

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708...

5.4CVSS5.7AI score0.00601EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•4 views

CVE-2020-4975: Improper Neutralization of Input During Web Page Generation

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192435...

5.4CVSS5.7AI score0.00598EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•6 views

CVE-2020-4866: Improper Neutralization of Input During Web Page Generation

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190742...

5.4CVSS5.7AI score0.00598EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•7 views

CVE-2020-4857: Improper Neutralization of Input During Web Page Generation

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190460...

6.4CVSS5.7AI score0.00733EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•5 views

CVE-2021-20350: Improper Neutralization of Input During Web Page Generation

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194707...

5.4CVSS5.7AI score0.00601EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•7 views

CVE-2020-4863: Improper Neutralization of Input During Web Page Generation

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190566...

6.4CVSS5.7AI score0.00598EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•4 views

CVE-2021-20340: Improper Neutralization of Input During Web Page Generation

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194451...

5.4CVSS5.7AI score0.00598EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/03/02 12:00 a.m.•34 views

IBM Engineering Requirements Management DOORS Next Cross-Site Scripting Vulnerability (CNVD-2021-32648)

IBM Engineering Requirements Management DOORS Next is a scalable solution from International Business Machines Corporation IBM. The solution helps you capture, track, analyze and manage systems and advanced IT application development. IBM Engineering Requirements Management DOORS Next suffers fro...

6.4CVSS6.1AI score0.00733EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/02/26 12:00 a.m.•17 views

IBM Engineering Workflow Management 跨站脚本漏洞

IBM Engineering Workflow Management EWM is a team collaboration tool that integrates a variety of development tasks, including iteration planning, process definition, change management, defect tracking, source code control, build automation, and reporting. A cross-site scripting vulnerability...

5.4CVSS6.5AI score0.00598EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/02/26 12:00 a.m.•16 views

IBM Engineering 跨站脚本漏洞

IBM Engineering Test Management is a collaborative quality management software from IBM that provides end-to-end test planning and test asset management to improve team efficiency. A cross-site scripting vulnerability exists in IBM Engineering Test Management, which can be exploited by an attacke...

5.4CVSS6.4AI score0.00601EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/02/26 12:00 a.m.•9 views

CVE-2021-20350

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194707...

5.4CVSS6AI score0.00601EPSS
SaveExploits0References3Affected Software6
attackerkb
attackerkb
•added 2021/02/26 12:00 a.m.•9 views

CVE-2021-20351

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708...

5.4CVSS6AI score0.00601EPSS
SaveExploits0References3Affected Software6
attackerkb
attackerkb
•added 2021/02/26 12:00 a.m.•11 views

CVE-2021-20340

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194451...

5.4CVSS6AI score0.00598EPSS
SaveExploits0References3Affected Software6
attackerkb
attackerkb
•added 2021/02/26 12:00 a.m.•8 views

CVE-2020-4863

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190566...

6.4CVSS6.1AI score0.00598EPSS
SaveExploits0References3Affected Software6
CNNVD
CNNVD
•added 2021/02/26 12:00 a.m.•16 views

IBM Engineering Requirements Quality Assistant 跨站脚本漏洞

IBM Engineering Requirements Quality Assistant is a Watson AI based software from IBM USA used to assist developers in improving the quality of engineering requirements. A cross-site scripting vulnerability exists in IBM Engineering Requirements Quality Assistant. An attacker can exploit the...

5.4CVSS6.5AI score0.00601EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/02/26 12:00 a.m.•18 views

IBM Engineering Requirements Quality Assistant 跨站脚本漏洞

IBM Engineering Test Management is a collaborative quality management solution that provides end-to-end test planning and test asset management with broad coverage from requirements to defects. A cross-site scripting vulnerability exists in IBM Engineering Test Management. An attacker could explo...

6.4CVSS6.7AI score0.00598EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/02/26 12:00 a.m.•25 views

IBM Engineering Test Management 跨站脚本漏洞

IBM Engineering Test Management is a collaborative quality management solution that provides end-to-end test planning and test asset management with broad coverage from requirements to defects. A cross-site scripting vulnerability exists in IBM Engineering Test Management. An attacker could explo...

5.4CVSS6.5AI score0.00598EPSS
SaveExploits0References4
Rows per page
Query Builder