2141 matches found
CVE-2016-9707
IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 2000784...
Unspecified Vulnerability in IBM Jazz Team Server
IBM Jazz Team Server is a set of project management tools for use in IBM Rational Jazz team collaboration platform from IBM in the United States. A security vulnerability exists in the CLM application in IBM Jazz Team Server. An attacker could exploit the vulnerability to gain access to user...
CVE-2016-2981
An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference : 1999965...
Design/Logic Flaw
An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference : 1999965...
CVE-2016-2981
An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference : 1999965...
CVE-2016-2981
The CVE-2016-2981 entry concerns an undisclosed vulnerability in the CLM applications of IBM Jazz Team Server that could allow unauthorized access to user credentials. The IBM bulletin for CLM/Jazz products (Rational Collaboration Lifecycle Management, QMR, RTC, DOORS Next Gen, etc.) lists affect...
CVE-2016-9975
IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...
Cross site request forgery (csrf)
IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...
CVE-2016-9975
IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...
CVE-2016-9975
CVE-2016-9975 affects IBM Jazz for Service Management (1.1.2.1 and 1.1.3). The CSRF vulnerability could allow an attacker to perform unauthorized actions authenticated by a trusted user. Connected IBM advisories cite affected products and remediation: IBM Monitoring, IBM Application Diagnostics, ...
CVE-2016-9975
IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1998714...
CVE-2016-8968
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1998515...
Cross site scripting
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1998515...
CVE-2016-8968
CVE-2016-8968 affects IBM Jazz Foundation and related Jazz-based products (CLM, RDNG, RELM, RTC, RQM, Rhapsody Design Manager, RSA Design Manager). The vulnerability is a cross-site scripting flaw in the Web UI that lets an attacker embed arbitrary JavaScript, potentially disclosing credentials w...
CVE-2016-8968
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1998515...
IBM Jazz Team Server Information Disclosure Vulnerability
IBM Jazz Team Server is a suite of project management tools for use in IBM Rational Jazz Team Collaboration Platform from IBM in the United States. A security vulnerability exists in IBM Jazz Team Server. An attacker could exploit the vulnerability to obtain deployment information...
CVE-2016-2866
An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user...
Code injection
An unspecified vulnerability in IBM Jazz Team Server may disclose some deployment information to an authenticated user...