CVE-2016-9707

IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 2000784...

CVE-2016-9707

CVE-2016-9707: IBM Jazz Foundation is affected by an XML External Entity (XXE) vulnerability in XML processing, enabling potential exposure of sensitive data or memory exhaustion. The IBM security bulletin maps the affected products to the IBM Jazz CLM family (including Rational Collaborative Lif...

PT-2017-10280

Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation affected versions not specified Description The issue is caused by an XML External Entity Injection XXE error when processing XML data, which could allow a remote attacker to expose highly sensitive information or consume a...

CVE-2016-9707: Improper Restriction of XML External Entity Reference

IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 2000784...

Unspecified Vulnerability in IBM Jazz Team Server

IBM Jazz Team Server is a set of project management tools for use in IBM Rational Jazz team collaboration platform from IBM in the United States. A security vulnerability exists in the CLM application in IBM Jazz Team Server. An attacker could exploit the vulnerability to gain access to user...

CVE-2016-2981

An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference : 1999965...

Design/Logic Flaw

An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference : 1999965...

CVE-2016-2981

An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference : 1999965...

CVE-2016-2981

The CVE-2016-2981 entry concerns an undisclosed vulnerability in the CLM applications of IBM Jazz Team Server that could allow unauthorized access to user credentials. The IBM bulletin for CLM/Jazz products (Rational Collaboration Lifecycle Management, QMR, RTC, DOORS Next Gen, etc.) lists affect...

CVE-2016-2981: Exposure of Sensitive Information to an Unauthorized Actor

An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference : 1999965...

PT-2017-8290

Name of the Vulnerable Software and Affected Versions IBM Jazz Team Server affected versions not specified Description An undisclosed issue in the CLM applications of IBM Jazz Team Server may allow unauthorized access to user credentials. Recommendations At the moment, there is no information abo...

CVE-2016-9975

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...

Cross site request forgery (csrf)

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...

CVE-2016-9975

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...

CVE-2016-9975

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...

CVE-2016-9975

CVE-2016-9975 affects IBM Jazz for Service Management (1.1.2.1 and 1.1.3). The CSRF vulnerability could allow an attacker to perform unauthorized actions authenticated by a trusted user. Connected IBM advisories cite affected products and remediation: IBM Monitoring, IBM Application Diagnostics, ...

PT-2017-10402

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management versions 1.1.2.1 through 1.1.3 Description The issue allows an attacker to execute malicious and unauthorized actions by exploiting cross-site request forgery. This could be done by transmitting actions from a...

CVE-2016-9975: Cross-Site Request Forgery (CSRF)

IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...

CVE-2016-8968

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1998515...

Cross site scripting

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1998515...