CVE-2016-8968

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1998515...

CVE-2016-8968

CVE-2016-8968 affects IBM Jazz Foundation and related Jazz-based products (CLM, RDNG, RELM, RTC, RQM, Rhapsody Design Manager, RSA Design Manager). The vulnerability is a cross-site scripting flaw in the Web UI that lets an attacker embed arbitrary JavaScript, potentially disclosing credentials w...

PT-2017-9906

Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

CVE-2016-8968: Improper Neutralization of Input During Web Page Generation

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1998515...

IBM Jazz Team Server Information Disclosure Vulnerability

IBM Jazz Team Server is a suite of project management tools for use in IBM Rational Jazz Team Collaboration Platform from IBM in the United States. A security vulnerability exists in IBM Jazz Team Server. An attacker could exploit the vulnerability to obtain deployment information...

CVE-2016-2866

An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user...

Code injection

An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user...

CVE-2016-2866

An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user...

CVE-2016-2866

An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user...

CVE-2016-2866

IBM Jazz Team Server has a vulnerability (CVE-2016-2866) where an authenticated user may disclose deployment information. Affected products include Rational CLM/Rational DOORS Next Generation/RELM/RTC/RQM/RSA DM/Rhapsody DM up to 6.0.3 with various sub-versions; remediation for 6.0.3 and earlier ...

CVE-2016-2866: Exposure of Sensitive Information to an Unauthorized Actor

An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user...

PT-2017-8263

Name of the Vulnerable Software and Affected Versions IBM Jazz Team Server affected versions not specified Description The issue may disclose some deployment information to an authenticated user. Recommendations At the moment, there is no information about a newer version that contains a fix for...

IBM Jazz for Service Management Information Disclosure Vulnerability

IBM Jazz for Service Management provides enhanced solutions in integrating service management and third-party offerings in key areas such as reporting, security, and administrative services. An information disclosure vulnerability exists in IBM Jazz for Service Management, which could be exploite...

CVE-2016-5935

IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

CVE-2016-5935

IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

Information disclosure

IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

CVE-2016-5935

CVE-2016-5935 relates to IBM Jazz for Service Management via IBM Dashboard Application Services Hub (DASH) 3.1.3 (part of JazzSM 1.1.3). The vulnerability arises from a lack of SSL certificate validation when connecting to remote datastores from the WebSphere Admin Console in federation scenarios...

CVE-2016-5935

IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...

PT-2017-8819

Name of the Vulnerable Software and Affected Versions IBM Jazz for Service Management affected versions not specified Description The issue is caused by the failure to properly validate the SSL certificate, allowing a remote attacker to obtain sensitive information. An attacker could exploit this...

CVE-2016-5935: Exposure of Sensitive Information to an Unauthorized Actor

IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques...