CVE-2020-4975

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192435...

Security Bulletin: OpenSSL vulnerability affects IBM Engineering Workflow Management

Summary OpenSSL has a security vulnerability that allows a remote attacker to exploit the application. OpenSSL is used by Rational BuildForge Agent shipped with IBM Engineering Workflow Management. Rational BuildForge has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-1551...

IBM Engineering Workflow Management WEBUI Cross-Site Scripting Vulnerability

IBM Engineering Workflow Management is a workflow management system. A cross-site scripting vulnerability exists in IBM Engineering Workflow Management, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to obtain sensitive information or hijack a...

IBM Engineering Requirements Quality Assistant Cross-Site Scripting Vulnerability (CNVD-2021-02620)

IBM Engineering Requirements Quality Assistant uses AI to help you improve requirements quality from the authoring source. A cross-site scripting vulnerability exists in IBM Engineering Requirements Quality Assistant. An attacker could exploit the vulnerability to embed arbitrary JavaScript code ...

CVE-2020-4666

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2020-4667: Improper Input Validation

IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation. IBM X-Force ID: 186282...

CVE-2020-4664: Improper Neutralization of Input During Web Page Generation

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2020-4666: Improper Neutralization of Input During Web Page Generation

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

PT-2021-12151

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to...

IBM Jazz Foundation 跨站脚本漏洞

IBM Engineering Workflow Management EWM is a team collaboration tool that integrates a variety of development tasks, including iteration planning, process definition, change management, defect tracking, source code control, build automation, and reporting. A cross-site scripting vulnerability...

IBM Jazz Foundation products 跨站脚本漏洞

IBM Engineering Test Management is a collaborative quality management solution that provides end-to-end test planning and test asset management, with broad coverage of all aspects from requirements to defects. A cross-site scripting vulnerability exists in IBM Engineering Test Management. An...

PT-2021-12152

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises affected versions not specified Description The issue is related to improper input validation, which could allow an authenticated user to obtain sensitive information. Recommendations ...

PT-2021-12150

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to...

PT-2021-12149

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to...

CVE-2020-4663: Improper Neutralization of Input During Web Page Generation

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

Security Bulletin: Multiple vulnerabilites affect IBM Jazz Foundation and IBM Engineering products.

Summary There are multiple vulnerabilities that are used by IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Requirements Management DOORS Next DOORS Next, IBM Engineering Lifecycle Optimization - Engineeri...

Security Bulletin: Multiple vulnerabilities affect IBM Engineering Requirements Quality Assistant On-Premises

Summary There are multiple vulnerabilites that affect IBM Engineering Requirements Quality Assistant On-Premises including the IBM SDK, Java Technology Edition Quarterly CPU from Oct 2019, Jan 2020 and Apr 2020 plus CVE-2020-2654 deferred from Oracle Jan 2020 CPU and CVE-2019-2949 deferred from...

CVE-2020-4666

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2020-4663

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

Security Bulletin: Multiple vulnerabilities affects IBM Jazz Foundation and IBM Engineering products.

Summary There are multiple vulnerabilities that are used by IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Requirements Management DOORS Next DOORS Next, IBM Engineering Lifecycle Optimization - Engineeri...