CVE-2016-9973

IBM Security Bulletin AFBE46D8 confirms CVE-2016-9973 as a Cross-Site Scripting flaw in IBM Jazz Foundation/Web UI affecting IBM Jazz Team Server and multiple Rational products in CLM/RQM/RDNG/RTP families. The vulnerability arises in the Jazz Foundation component and could let an attacker inject...

PT-2017-10401

Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

CVE-2016-9973: Improper Neutralization of Input During Web Page Generation

IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120209...

CVE-2017-1099: Exposure of Sensitive Information to an Unauthorized Actor

IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force ID: 120659...

Information Disclosure Vulnerability in Multiple IBM Products (CNVD-2017-07517)

IBM Rational Collaborative Lifecycle Management CLM is a collaborative lifecycle management solution from IBM. IBM Rational Quality Manager RQM is a set of IBM's collaborative, Web-based quality management solutions. jazz Foundation is one of the software development collaboration platform. An...

CVE-2016-9735

IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,...

Information disclosure

IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,...

CVE-2016-9735

IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,...

CVE-2016-9735

CVE-2016-9735 is an IBM Jazz Foundation information-disclosure vulnerability. An authenticated user could obtain sensitive information from stack traces. Affected products span IBM Jazz-based applications: CLM, RDNG, RELM, RTC, RQM, Rhapsody Design Manager, and RSA Design Manager. Affected versio...

CVE-2016-9735

IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,...

PT-2017-10300

Name of the Vulnerable Software and Affected Versions IBM Jazz Foundation affected versions not specified Description The issue could allow an authenticated user to obtain sensitive information from stack traces. Recommendations At the moment, there is no information about a newer version that...

CVE-2016-9735: Exposure of Sensitive Information to an Unauthorized Actor

IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781,...

jazz-shop.ru XSS vulnerability

Vulnerable URL: http://jazz-shop.ru/search/?query=%22%3E+%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 92559 VIP website status...

USN-3268-1: QEMU vulnerabilities

Zhenhao Hong discovered that QEMU incorrectly handled the Virtio GPU device. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. CVE-2016-10028 It was discovered that QEMU incorrectly handled the JAZZ RC4030 device. A privileged attacker...

Ubuntu: Security Advisory (USN-3261-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3261-1 qemu vulnerabilities

Zhenhao Hong discovered that QEMU incorrectly handled the Virtio GPU device. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 16.10. CVE-2016-10028, CVE-2016-10029 Li Qiang discovered...

IBM Jazz Foundation External Entity Injection Vulnerability

IBM Jazz Foundation is a scalable and extensible team collaboration platform that integrates tasks across the software lifecycle, and which provides useful building blocks and frameworks that help develop new products and tools. IBM Jazz Foundation suffers from an XML External Entity Injection XX...

CVE-2016-9707

IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 2000784...

Xxe

IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 2000784...

CVE-2016-9707

IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference : 2000784...