Lucene search
+L

619 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•4 views

CVE-2021-20340: Improper Neutralization of Input During Web Page Generation

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194451...

5.4CVSS5.7AI score0.00598EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•6 views

CVE-2020-4866: Improper Neutralization of Input During Web Page Generation

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190742...

5.4CVSS5.7AI score0.00598EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•7 views

CVE-2020-4863: Improper Neutralization of Input During Web Page Generation

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190566...

6.4CVSS5.7AI score0.00598EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•7 views

CVE-2020-4857: Improper Neutralization of Input During Web Page Generation

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190460...

6.4CVSS5.7AI score0.00733EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•4 views

CVE-2020-4856: Improper Neutralization of Input During Web Page Generation

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190459...

6.4CVSS5.7AI score0.00598EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/03/04 12:00 a.m.•2 views

PT-2021-12262

Name of the Vulnerable Software and Affected Versions IBM Engineering products affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a truste...

5.4CVSS0.00598EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•6 views

CVE-2020-4975: Improper Neutralization of Input During Web Page Generation

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192435...

5.4CVSS5.7AI score0.00598EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/03/02 12:00 a.m.•34 views

IBM Engineering Requirements Management DOORS Next Cross-Site Scripting Vulnerability (CNVD-2021-32648)

IBM Engineering Requirements Management DOORS Next is a scalable solution from International Business Machines Corporation IBM. The solution helps you capture, track, analyze and manage systems and advanced IT application development. IBM Engineering Requirements Management DOORS Next suffers fro...

6.4CVSS6.1AI score0.00733EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/02/26 12:00 a.m.•7 views

CVE-2020-4975

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192435...

5.4CVSS5.8AI score0.00598EPSS
SaveExploits0References3Affected Software6
attackerkb
attackerkb
•added 2021/02/26 12:00 a.m.•8 views

CVE-2020-4863

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190566...

6.4CVSS6.1AI score0.00598EPSS
SaveExploits0References3Affected Software6
attackerkb
attackerkb
•added 2021/02/26 12:00 a.m.•9 views

CVE-2020-4857

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190460...

6.4CVSS6.1AI score0.00733EPSS
SaveExploits0References3Affected Software6
attackerkb
attackerkb
•added 2021/02/26 12:00 a.m.•10 views

CVE-2020-4856

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190459...

6.4CVSS6.1AI score0.00598EPSS
SaveExploits0References3Affected Software6
CNNVD
CNNVD
•added 2021/02/26 12:00 a.m.•17 views

IBM Engineering Workflow Management 跨站脚本漏洞

IBM Engineering Workflow Management EWM is a team collaboration tool that integrates a variety of development tasks, including iteration planning, process definition, change management, defect tracking, source code control, build automation, and reporting. A cross-site scripting vulnerability...

5.4CVSS6.5AI score0.00598EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/02/26 12:00 a.m.•16 views

IBM Engineering Requirements Quality Assistant 跨站脚本漏洞

IBM Engineering Requirements Quality Assistant is a Watson AI based software from IBM USA used to assist developers in improving the quality of engineering requirements. A cross-site scripting vulnerability exists in IBM Engineering Requirements Quality Assistant. An attacker can exploit the...

5.4CVSS6.5AI score0.00601EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/02/26 12:00 a.m.•25 views

IBM Engineering Test Management 跨站脚本漏洞

IBM Engineering Test Management is a collaborative quality management solution that provides end-to-end test planning and test asset management with broad coverage from requirements to defects. A cross-site scripting vulnerability exists in IBM Engineering Test Management. An attacker could explo...

5.4CVSS6.5AI score0.00598EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/02/26 12:00 a.m.•18 views

IBM Engineering Requirements Quality Assistant 跨站脚本漏洞

IBM Engineering Test Management is a collaborative quality management solution that provides end-to-end test planning and test asset management with broad coverage from requirements to defects. A cross-site scripting vulnerability exists in IBM Engineering Test Management. An attacker could explo...

6.4CVSS6.7AI score0.00598EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/02/26 12:00 a.m.•16 views

IBM Engineering 跨站脚本漏洞

IBM Engineering Test Management is a collaborative quality management software from IBM that provides end-to-end test planning and test asset management to improve team efficiency. A cross-site scripting vulnerability exists in IBM Engineering Test Management, which can be exploited by an attacke...

5.4CVSS6.4AI score0.00601EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/02/26 12:00 a.m.•9 views

CVE-2021-20350

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194707...

5.4CVSS6AI score0.00601EPSS
SaveExploits0References3Affected Software6
attackerkb
attackerkb
•added 2021/02/26 12:00 a.m.•11 views

CVE-2021-20340

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194451...

5.4CVSS6AI score0.00598EPSS
SaveExploits0References3Affected Software6
attackerkb
attackerkb
•added 2021/02/26 12:00 a.m.•9 views

CVE-2021-20351

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708...

5.4CVSS6AI score0.00601EPSS
SaveExploits0References3Affected Software6
Rows per page
Query Builder