CVE-2023-45187

CVE-2023-45187 affects IBM Engineering Lifecycle Optimization - Publishing, with versions 7.0.2 and 7.0.3. The root cause is failure to invalidate the user session after logout, which could allow an authenticated user to impersonate another user on the system. NVD lists CVSSv3.1 base score 8.8 (H...

CVE-2021-29844

CVE-2021-29844 affects IBM Jazz Team Server family (including CLM, DOORS Next, ELM, EWM, RTC, and related IBM Engineering products). The vulnerability is a server-side request forgery (SSRF) due to insufficient validation of user input, enabling an authenticated attacker to cause the server to se...