CVE-2021-29788

IBM Engineering Requirements Quality Assistant On-Premises All versions is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2021-29799

IBM Engineering Requirements Quality Assistant On-Premises All versions could allow an authenticated user to obtain sensitive information due to improper client side validation. IBM X-Force ID: 203738...

Cross site request forgery (csrf)

IBM Engineering Requirements Quality Assistant On-Premises All versions is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force Id: 208310...

Input validation

IBM Engineering Requirements Quality Assistant On-Premises All versions could allow an authenticated user to obtain sensitive information due to improper client side validation. IBM X-Force ID: 203738...

CVE-2021-38868

IBM Engineering Requirements Quality Assistant On-Premises All versions is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force Id: 208310...

CVE-2021-38868

CVE-2021-38868 : IBM Engineering Requirements Quality Assistant On-Premises (all versions) is vulnerable to cross-site request forgery. The vulnerability could allow an attacker to forge actions executed from a trusted user session, enabling malicious/unauthorized requests. The IBM bulletin for t...

CVE-2021-29799

IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to CVE-2021-29799 due to improper client-side validation, allowing an authenticated user to obtain sensitive information ( Confidentiality impact: High; Integrity/Availability: None). The issue is documented a...

CVE-2021-29790

CVE-2021-29790 affects IBM Engineering Requirements Quality Assistant On-Premises (All versions). It is a cross-site scripting vulnerability in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Exploitati...

CVE-2021-29788

CVE-2021-29788 affects IBM Engineering Requirements Quality Assistant On-Premises (all versions). A cross-site scripting vulnerability arises from inadequate data validation/output filtering, allowing an attacker to embed arbitrary JavaScript in the Web UI and potentially disclose credentials wit...

CVE-2021-29788

IBM Engineering Requirements Quality Assistant On-Premises All versions is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

PT-2022-9934

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises All versions Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure...

IBM Engineering Requirements Quality Assistant 安全漏洞

IBM Engineering Requirements Quality Assistant is a Watson AI-based software from IBM USA used to assist developers in improving the quality of engineering requirements. The application significantly reduces the cost of finding defects, facilitates early detection of requirements errors in the...

PT-2022-9935

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises All versions Description The issue is related to improper client-side validation, which could allow an authenticated user to obtain sensitive information. Recommendations For all...

PT-2022-10787

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises All versions Description The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery...

CVE-2021-29788: Improper Neutralization of Input During Web Page Generation

IBM Engineering Requirements Quality Assistant On-Premises All versions is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

PT-2022-9933

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises All versions Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure...

CVE-2021-29799: Undefined Security Weakness

IBM Engineering Requirements Quality Assistant On-Premises All versions could allow an authenticated user to obtain sensitive information due to improper client side validation. IBM X-Force ID: 203738...

CVE-2021-38868: Cross-Site Request Forgery (CSRF)

IBM Engineering Requirements Quality Assistant On-Premises All versions is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force Id: 208310...

CVE-2021-29790: Improper Neutralization of Input During Web Page Generation

IBM Engineering Requirements Quality Assistant On-Premises All versions is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2021-29799

IBM Engineering Requirements Quality Assistant On-Premises All versions could allow an authenticated user to obtain sensitive information due to improper client side validation. IBM X-Force ID: 203738...