Lucene search
+L

401 matches found

Prion
Prion
added 2021/06/02 9:15 p.m.24 views

Server side request forgery (ssrf)

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194594...

5.5CVSS5.2AI score0.00504EPSS
Exploits0References2Affected Software9
Cvelist
Cvelist
added 2021/06/02 8:40 p.m.32 views

CVE-2021-20347

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194596...

5.4CVSS5.4AI score0.00504EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/06/02 8:40 p.m.22 views

CVE-2021-20346

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194595...

5.4CVSS5.4AI score0.00504EPSS
Exploits0References2
Cvelist
Cvelist
added 2021/06/02 8:40 p.m.30 views

CVE-2021-20345

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194594...

5.4CVSS5.4AI score0.00504EPSS
Exploits0References2
CVE
CVE
added 2021/06/02 8:40 p.m.80 views

CVE-2021-20346

CVE-2021-20346 affects IBM Jazz Foundation and IBM Engineering products, with a server-side request forgery (SSRF) flaw that could allow an authenticated attacker to send unauthorized requests from the system, potentially enabling network enumeration. The vulnerability is discussed across multipl...

5.5CVSS6AI score0.00504EPSS
Exploits0References2Affected Software9
CVE
CVE
added 2021/06/02 8:40 p.m.75 views

CVE-2021-20345

This CVE-2021-20345 describes a server-side request forgery (SSRF) vulnerability affecting IBM Jazz Foundation and IBM Engineering products. Affected components include DOORS Next, RDNG, PUB, RQM, ETM, CLM, ELM, RMM, RELM, ENI and related Deployments (versions listed in the Affected Products and ...

5.5CVSS6AI score0.00504EPSS
Exploits0References2Affected Software9
Cvelist
Cvelist
added 2021/06/02 8:40 p.m.23 views

CVE-2021-20343

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194593...

5.4CVSS5.4AI score0.00504EPSS
Exploits0References2
CVE
CVE
added 2021/06/02 8:40 p.m.75 views

CVE-2021-20343

CVE-2021-20343 describes a server-side request forgery (SSRF) vulnerability affecting IBM Jazz Foundation and multiple IBM Engineering products (e.g., DOORS Next, RDNG, PUB, RQM, ETM, CLM, ELM, ENI, RMM, RELM, RDM, etc.). The underlying issue enables an authenticated attacker to cause the system ...

5.5CVSS6AI score0.00504EPSS
Exploits0References2Affected Software9
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.5 views

IBM Jazz Foundation 代码问题漏洞

IBM Jazz Foundation is a software development collaboration platform for IBM Rational products. A server-side request forgery vulnerability exists in IBM Jazz Foundation. An attacker could exploit this vulnerability to send unauthorized requests from the system, which could allow network...

5.5CVSS5.6AI score0.00504EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.7 views

IBM Jazz Foundation 代码问题漏洞

IBM Jazz Foundation is a software development collaboration platform for IBM Rational products. A server-side request forgery vulnerability exists in IBM Jazz Foundation. An attacker could exploit this vulnerability to send unauthorized requests from the system, which could allow network...

5.5CVSS5.6AI score0.00504EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/06/01 12:0 a.m.7 views

IBM Jazz Foundation 代码问题漏洞

IBM Jazz Foundation is a software development collaboration platform for IBM Rational products. A server-side request forgery vulnerability exists in IBM Jazz Foundation. An attacker could exploit this vulnerability to send unauthorized requests from the system, which could allow network...

5.5CVSS5.6AI score0.00504EPSS
Exploits0References3
CNVD
CNVD
added 2021/05/14 12:0 a.m.6 views

IBM Jazz Reporting Service Server-Side Request Forgery Vulnerability

IBM Jazz Reporting Service helps you quickly and easily integrate data from a variety of data sources across your tools and projects, and provides a set of ready-to-use reports for sharing information about your lifecycle management projects. A server-side request forgery vulnerability exists in...

6.5CVSS6.3AI score0.00523EPSS
Exploits0References1
NVD
NVD
added 2021/05/13 4:15 p.m.30 views

CVE-2021-20535

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 198834...

6.5CVSS0.00523EPSS
Exploits0References2
OSV
OSV
added 2021/05/13 4:15 p.m.3 views

CVE-2021-20535

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 198834...

5.4CVSS6.4AI score0.00523EPSS
Exploits0References2
Prion
Prion
added 2021/05/13 4:15 p.m.19 views

Server side request forgery (ssrf)

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 198834...

5.5CVSS5.3AI score0.00523EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/05/13 3:30 p.m.31 views

CVE-2021-20535

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 198834...

6.5CVSS5.5AI score0.00523EPSS
Exploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2021/05/12 9:55 p.m.19 views

Security Bulletin: Security vulnerability affects the Report Builder that is shipped with Jazz Reporting Service (CVE-2021-20535)

Summary There is a security vulnerability in the Report Builder shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2021-20535 DESCRIPTION: IBM Jazz Reporting Service is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized...

6.5CVSS0.8AI score0.00523EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2021/05/12 12:0 a.m.4 views

IBM Jazz Reporting Service 代码问题漏洞

IBM Jazz Reporting Service helps you quickly and easily integrate data from a variety of data sources across your tools and projects, and provides a set of ready-to-use reports for sharing information about your lifecycle management projects. A server-side request forgery vulnerability exists in...

6.5CVSS5.6AI score0.00523EPSS
Exploits0References3
CNVD
CNVD
added 2021/01/28 12:0 a.m.6 views

IBM QRadar SIEM Server-Side Request Forgery Vulnerability (CNVD-2021-10825)

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. A server-side...

5.4CVSS6.3AI score0.00541EPSS
Exploits1References1
OSV
OSV
added 2021/01/27 5:15 p.m.2 views

CVE-2020-4787

IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other...

2.3CVSS5.8AI score0.0029EPSS
Exploits0References2
Rows per page
Query Builder