EUVD-2020-25911

Malware in sbrugna...

EUVD-2021-16273

Malware in sbrugna...

EUVD-2021-25305

Malware in sbrugna...

EUVD-2021-16373

Malware in sbrugna...

EUVD-2021-16264

Malware in sbrugna...

Security Bulletin: The IBM® Engineering Lifecycle Engineering product using IBM SDK, Java Technology Edition Quarterly CPU - Apr 2023 - Includes Oracle April 2023 CPU is vulnerable to (CVE-2023-2597)

Summary All appicable Java SE CVEs published by Oracle as part of their April 2023 Critical Patch Update, plus CVE-2023-2597. Following IBM® Engineering Lifecycle Engineering product is vulnerable to this attack, it has been addressed in this bulletin: IBM Engineering Requirements Quality Assista...

Security Bulletin: There are multiple vulnerabilites that affect IBM Engineering Requirements Quality Assistant On-Premises

Summary IBM Engineering Requirements Quality Assistant On-Premises affected by multiple vulnerabilities due to which an attacker could exploit this vulnerability to execute arbitrary code on the system and cause the application to crash cause a denial of service condition on the system. This...

Security Bulletin: There are multiple vulnerabilites that affect IBM Engineering Requirements Quality Assistant On-Premises (CVE-2021-22939, CVE-2021-22931, CVE-2020-7598)

Summary IBM Engineering Requirements Quality Assistant On-Premises affected by multiple vulnerabilites CVE-2021-22939, CVE-2021-22931, CVE-2020-7598 which allowed a remote attacker to exploit this vulnerability to add or modify properties of Object.prototype, connect to servers using an expired...

CVE-2021-29799

IBM Engineering Requirements Quality Assistant On-Premises All versions could allow an authenticated user to obtain sensitive information due to improper client side validation. IBM X-Force ID: 203738...

CVE-2021-29790

IBM Engineering Requirements Quality Assistant On-Premises All versions is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

CVE-2021-29799

IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to CVE-2021-29799 due to improper client-side validation, allowing an authenticated user to obtain sensitive information ( Confidentiality impact: High; Integrity/Availability: None). The issue is documented a...

CVE-2021-29799

IBM Engineering Requirements Quality Assistant On-Premises All versions could allow an authenticated user to obtain sensitive information due to improper client side validation. IBM X-Force ID: 203738...

CVE-2021-29790

IBM Engineering Requirements Quality Assistant On-Premises All versions is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

PT-2022-9934

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises All versions Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure...

PT-2022-9933

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises All versions Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure...

PT-2022-10787

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises All versions Description The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery...

CVE-2021-38868: Cross-Site Request Forgery (CSRF)

IBM Engineering Requirements Quality Assistant On-Premises All versions is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force Id: 208310...

IBM Engineering Requirements Quality Assistant 跨站脚本漏洞

IBM Engineering Requirements Quality Assistant is a Watson AI-based software from IBM to assist developers in improving the quality of engineering requirements. The application can significantly reduce the cost of finding defects and facilitate the early detection of requirements errors in the...

CVE-2021-29799: Undefined Security Weakness

IBM Engineering Requirements Quality Assistant On-Premises All versions could allow an authenticated user to obtain sensitive information due to improper client side validation. IBM X-Force ID: 203738...

PT-2022-9935

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises All versions Description The issue is related to improper client-side validation, which could allow an authenticated user to obtain sensitive information. Recommendations For all...