Lucene search
+L

5090 matches found

CNNVD
CNNVD
added 2021/01/08 12:00 a.m.15 views

IBM Engineering Requirements Quality Assistant 跨站脚本漏洞

IBM Engineering Requirements Quality Assistant uses AI to help you improve requirements quality from the authoring source. A cross-site scripting vulnerability exists in IBM Engineering Requirements Quality Assistant. An attacker could exploit the vulnerability to embed arbitrary JavaScript code ...

5.4CVSS6.5AI score0.00554EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/08 12:00 a.m.15 views

IBM Engineering Requirements Quality Assistant 跨站脚本漏洞

IBM Engineering Requirements Quality Assistant uses AI to help you improve requirements quality from the authoring source. A cross-site scripting vulnerability exists in IBM Engineering Requirements Quality Assistant. An attacker could exploit the vulnerability to embed arbitrary JavaScript code ...

5.4CVSS6.5AI score0.00554EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/08 12:00 a.m.16 views

IBM Jazz Foundation 跨站脚本漏洞

IBM Engineering Workflow Management EWM is a team collaboration tool that integrates a variety of development tasks, including iteration planning, process definition, change management, defect tracking, source code control, build automation, and reporting. A cross-site scripting vulnerability...

5.4CVSS5.9AI score0.00554EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2021/01/07 9:30 p.m.35 views

Security Bulletin: Multiple vulnerabilites affect IBM Jazz Foundation and IBM Engineering products.

Summary There are multiple vulnerabilities that are used by IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Requirements Management DOORS Next DOORS Next, IBM Engineering Lifecycle Optimization - Engineeri...

5.4CVSS1.2AI score0.00982EPSS
SaveExploits0Affected Software5
NVD
NVD
added 2021/01/07 6:15 p.m.24 views

CVE-2020-4895

IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...

6.4CVSS5.4AI score0.00554EPSS
SaveExploits0References2
NVD
NVD
added 2021/01/07 6:15 p.m.26 views

CVE-2020-4892

IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190979...

5.4CVSS5.2AI score0.00554EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/07 6:15 p.m.23 views

Cross site scripting

IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...

3.5CVSS5.1AI score0.00554EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/01/07 6:15 p.m.19 views

Cross site scripting

IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190979...

3.5CVSS5.1AI score0.00554EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/01/07 5:40 p.m.24 views

CVE-2020-4892

IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190979...

5.4CVSS5.2AI score0.00554EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/01/07 12:00 a.m.3 views

CVE-2020-4691

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186698...

5.4CVSS5AI score0.00554EPSS
SaveExploits0References3Affected Software10
ATTACKERKB
ATTACKERKB
added 2021/01/07 12:00 a.m.3 views

CVE-2020-4697

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186790...

5.4CVSS5AI score0.00554EPSS
SaveExploits0References3Affected Software10
ATTACKERKB
ATTACKERKB
added 2021/01/07 12:00 a.m.5 views

CVE-2020-4733

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188127...

5.4CVSS5AI score0.00554EPSS
SaveExploits0References3Affected Software10
IBM Security Bulletins
IBM Security Bulletins
added 2021/01/06 7:34 a.m.22 views

Security Bulletin: Stored Cross-Site Scripting Vulnerability Affects IBM Emptoris Sourcing (CVE-2020-4895)

Summary Cross-Site Scripting Stored affects IBM Emptoris Sourcing. Vulnerability Details CVEID: CVE-2020-4895 DESCRIPTION: IBM Emptoris is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

6.4CVSS5.5AI score0.00554EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/01/06 7:29 a.m.19 views

Security Bulletin: Reflected Cross-site Scripting Vulnerability Affects IBM Emptoris Contract Management (CVE-2020-4892)

Summary Cross-site Scripting Reflected affects IBM Emptoris Contract Management. Vulnerability Details CVEID: CVE-2020-4892 DESCRIPTION: IBM Emptoris is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...

5.4CVSS5.5AI score0.00554EPSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/01/06 12:00 a.m.5 views

CVE-2020-4892

IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190979...

5.4CVSS5.2AI score0.00554EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/01/06 12:00 a.m.4 views

CVE-2020-4895

IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...

6.4CVSS5.7AI score0.00554EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2021/01/04 2:15 p.m.27 views

CVE-2020-4916

IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191390...

5.5CVSS4.8AI score0.00654EPSS
SaveExploits0References2
NVD
NVD
added 2021/01/04 2:15 p.m.25 views

CVE-2020-4909

IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191273...

4.8CVSS4.8AI score0.00545EPSS
SaveExploits0References2
NVD
NVD
added 2021/01/04 2:15 p.m.26 views

CVE-2020-4910

IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191274...

4.8CVSS4.8AI score0.00545EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/04 2:15 p.m.25 views

Cross site scripting

IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191274...

3.5CVSS4.8AI score0.00545EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder