Lucene search
+L

1743 matches found

Cvelist
Cvelist
added 2021/01/27 4:15 p.m.30 views

CVE-2020-4855

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190457...

5.4CVSS5.2AI score0.00665EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/01/27 4:15 p.m.27 views

CVE-2020-4865

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190741...

5.4CVSS5.2AI score0.00665EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/01/27 4:15 p.m.27 views

CVE-2020-4524

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182434...

5.4CVSS5.2AI score0.00665EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/27 1:15 p.m.18 views

Cross site scripting

IBM Cloud Pak for Security CP4S 1.4.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

4.3CVSS5.9AI score0.00721EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/01/12 3:15 p.m.16 views

Cross site scripting

IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

3.5CVSS5.1AI score0.00605EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2021/01/11 12:0 a.m.5 views

IBM Engineering Workflow Management Cross-Site Scripting Vulnerability (CNVD-2021-03015)

IBM Engineering Workflow Management EWM is a team collaboration tool that integrates a variety of development tasks, including iteration planning, process definition, change management, defect tracking, source code control, build automation, and reporting. A cross-site scripting vulnerability...

5.4CVSS6.2AI score0.00554EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/08 9:15 p.m.6 views

CVE-2020-4697

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186790...

5.4CVSS5.7AI score0.00554EPSS
SaveExploits0References2
NVD
NVD
added 2021/01/08 9:15 p.m.31 views

CVE-2020-4733

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188127...

5.4CVSS5.2AI score0.00554EPSS
SaveExploits0References2
NVD
NVD
added 2021/01/08 9:15 p.m.20 views

CVE-2020-4691

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186698...

5.4CVSS4.7AI score0.00554EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/08 9:15 p.m.28 views

Cross site scripting

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186790...

3.5CVSS5.1AI score0.00554EPSS
SaveExploits0References2Affected Software13
Prion
Prion
added 2021/01/08 9:15 p.m.21 views

Cross site scripting

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186698...

3.5CVSS5.1AI score0.00554EPSS
SaveExploits0References2Affected Software13
CVE
CVE
added 2021/01/08 8:40 p.m.86 views

CVE-2020-4733

The CVE-2020-4733 entry corresponds to a cross-site scripting vulnerability in IBM Jazz Foundation/Engineering products (IBM Engineering Test Management and related Web UI components). The IBM Security Bulletin lists affected products and versions, noting that an attacker could embed arbitrary Ja...

5.4CVSS5.1AI score0.00554EPSS
SaveExploits0References2Affected Software13
NVD
NVD
added 2021/01/08 3:15 p.m.21 views

CVE-2020-4663

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS5.2AI score0.00554EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/08 3:15 p.m.20 views

Cross site scripting

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

3.5CVSS5.1AI score0.00554EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/08 3:15 p.m.17 views

Cross site scripting

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

3.5CVSS5.1AI score0.00554EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/01/08 2:45 p.m.20 views

CVE-2020-4666

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS5.2AI score0.00554EPSS
SaveExploits0References2
CVE
CVE
added 2021/01/08 2:45 p.m.52 views

CVE-2020-4666

CVE-2020-4666 affects IBM Engineering Requirements Quality Assistant On-Premises. The vulnerability is a cross-site scripting flaw in the Web UI that could let an attacker embed arbitrary JavaScript in the UI, potentially altering functionality and disclosing credentials within a trusted session....

5.4CVSS5.5AI score0.00554EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/01/08 2:45 p.m.21 views

CVE-2020-4664

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

5.4CVSS5.2AI score0.00554EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/01/08 12:0 a.m.9 views

IBM Engineering Requirements Quality Assistant 跨站脚本漏洞

IBM Engineering Requirements Quality Assistant uses AI to help you improve requirements quality from the authoring source. A cross-site scripting vulnerability exists in IBM Engineering Requirements Quality Assistant. An attacker could exploit the vulnerability to embed arbitrary JavaScript code ...

5.4CVSS6.5AI score0.00554EPSS
SaveExploits0References3
NVD
NVD
added 2021/01/07 6:15 p.m.22 views

CVE-2020-4892

IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190979...

5.4CVSS5.2AI score0.00554EPSS
SaveExploits0References2
Rows per page
Query Builder