Rational Doors Next Generation@6.0.6 Security Vulnerabilities and Issues — Rational Doors Next Generation@6.0.6 CVE List

Lucene search

IbmRational Doors Next Generation6.0.6

51 matches found

CVE•added 2021/01/08 9:15 p.m.•72 views

CVE-2020-4697

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186790.

5.4CVSS5.1AI score0.00236EPSS

CVE•added 2021/01/08 9:15 p.m.•68 views

CVE-2020-4544

IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 183189.

4.3CVSS4.4AI score0.00112EPSS

CVE•added 2021/01/08 9:15 p.m.•67 views

CVE-2020-4487

4.3CVSS4.4AI score0.00112EPSS

CVE•added 2021/01/08 9:15 p.m.•66 views

CVE-2020-4733

5.4CVSS5.1AI score0.00179EPSS

CVE•added 2021/06/02 9:15 p.m.•63 views

CVE-2021-20346

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194595.

5.5CVSS6AI score0.00148EPSS

CVE•added 2021/01/08 9:15 p.m.•61 views

CVE-2020-4691

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186698.

5.4CVSS5.1AI score0.00236EPSS

CVE•added 2021/06/02 9:15 p.m.•60 views

CVE-2020-4495

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted request to the REST API, an attacker could exploit this vulnerability to bypass access restrictions, and execute arbitrar...

9CVSS8.7AI score0.0151EPSS

CVE•added 2021/06/02 9:15 p.m.•60 views

CVE-2021-20338

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: ...

5.4CVSS5.5AI score0.00187EPSS

CVE•added 2021/06/02 9:15 p.m.•60 views

CVE-2021-20343

5.5CVSS6AI score0.0009EPSS

CVE•added 2021/06/02 9:15 p.m.•58 views

CVE-2021-20345

5.5CVSS6AI score0.00099EPSS

CVE•added 2021/06/02 9:15 p.m.•57 views

CVE-2021-20347

5.5CVSS6AI score0.00099EPSS

CVE•added 2021/06/02 9:15 p.m.•57 views

CVE-2021-20371

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195516.

6.5CVSS6.5AI score0.00141EPSS

CVE•added 2021/06/02 9:15 p.m.•56 views

CVE-2021-29670

5.4CVSS5.5AI score0.00208EPSS

CVE•added 2021/06/02 9:15 p.m.•55 views

CVE-2021-29668

5.4CVSS5.5AI score0.00208EPSS

CVE•added 2021/06/02 9:15 p.m.•54 views

CVE-2021-20348

5.5CVSS6.1AI score0.0009EPSS

CVE•added 2021/06/02 9:15 p.m.•53 views

CVE-2020-4977

IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-F...

5.4CVSS5.4AI score0.00187EPSS

CVE•added 2021/06/02 9:15 p.m.•52 views

CVE-2020-4732

IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions. IBM X-Force ID: 188126.

6.5CVSS6.5AI score0.00211EPSS

CVE•added 2021/06/02 9:15 p.m.•52 views

CVE-2020-5030

5.4CVSS5.5AI score0.00208EPSS

CVE•added 2020/09/02 7:15 p.m.•48 views

CVE-2020-4522

IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182397.

5.4CVSS5.2AI score0.00236EPSS

CVE•added 2021/10/27 4:15 p.m.•47 views

CVE-2021-29713

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

5.4CVSS5.5AI score0.00111EPSS

CVE•added 2021/03/04 7:15 p.m.•46 views

CVE-2021-20351

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708.

5.4CVSS5.3AI score0.00208EPSS

CVE•added 2020/09/02 7:15 p.m.•44 views

CVE-2020-4445

5.4CVSS5.2AI score0.00236EPSS

CVE•added 2021/10/27 4:15 p.m.•44 views

CVE-2021-29673

5.4CVSS5.6AI score0.00215EPSS

CVE•added 2021/10/27 4:15 p.m.•44 views

CVE-2021-29774

IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations. IBM X-Force ID: 203025.

7.5CVSS7.5AI score0.00269EPSS

CVE•added 2020/06/19 4:15 p.m.•43 views

CVE-2020-4297

IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session....

5.4CVSS5.6AI score0.00179EPSS

CVE•added 2021/03/04 7:15 p.m.•43 views

CVE-2020-4857

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190460.

6.4CVSS5.4AI score0.00174EPSS

CVE•added 2018/11/06 4:29 p.m.•41 views

CVE-2018-1694

IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Manager 5...

5.9CVSS5.4AI score0.00266EPSS

CVE•added 2021/03/04 7:15 p.m.•41 views

CVE-2020-4866

5.4CVSS5.5AI score0.00208EPSS

CVE•added 2021/03/04 7:15 p.m.•41 views

CVE-2021-20340

5.4CVSS5.5AI score0.00208EPSS

CVE•added 2021/10/27 4:15 p.m.•41 views

CVE-2021-29844

IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

8.8CVSS8.7AI score0.00128EPSS

CVE•added 2021/03/04 7:15 p.m.•40 views

CVE-2020-4856

6.4CVSS5.4AI score0.0025EPSS

CVE•added 2021/03/04 7:15 p.m.•40 views

CVE-2021-20350

5.4CVSS5.5AI score0.00208EPSS

CVE•added 2021/10/27 4:15 p.m.•40 views

CVE-2021-29786

IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Force ID: 203172.

6.5CVSS6.6AI score0.00087EPSS

CVE•added 2018/09/26 3:29 p.m.•39 views

CVE-2018-1610

IBM Rational DOORS Next Generation 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.4CVSS5.2AI score0.00158EPSS

CVE•added 2021/03/04 7:15 p.m.•39 views

CVE-2020-4863

6.4CVSS5.4AI score0.00177EPSS

CVE•added 2018/11/06 4:29 p.m.•38 views

CVE-2018-1606

IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next Generation 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Engineering Lifecycle Manager 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational Quality Man...

4.3CVSS4.3AI score0.00184EPSS

CVE•added 2020/07/16 3:15 p.m.•38 views

CVE-2019-4748

5.4CVSS5.2AI score0.00179EPSS

CVE•added 2021/07/28 1:15 p.m.•37 views

CVE-2020-4974

IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434.

6.5CVSS6.3AI score0.00168EPSS

CVE•added 2021/07/28 1:15 p.m.•37 views

CVE-2020-5004

5.4CVSS5.3AI score0.00346EPSS

CVE•added 2020/04/08 2:15 p.m.•36 views

CVE-2019-4746

IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X...

5.4CVSS5.2AI score0.00182EPSS

CVE•added 2020/09/02 7:15 p.m.•35 views

CVE-2020-4546

5.4CVSS5.2AI score0.00236EPSS

CVE•added 2021/03/04 7:15 p.m.•35 views

CVE-2020-4975

5.4CVSS5.5AI score0.0025EPSS

CVE•added 2019/03/06 8:29 p.m.•34 views

CVE-2018-1912

IBM DOORS Next Generation (DNG/RRC) 6.0.2 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Forc...

5.4CVSS5.2AI score0.00174EPSS

CVE•added 2019/04/03 2:29 p.m.•34 views

CVE-2018-1913

IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

5.4CVSS5.2AI score0.00229EPSS

CVE•added 2020/04/08 2:15 p.m.•32 views

CVE-2019-4740

5.4CVSS5.2AI score0.00158EPSS

CVE•added 2020/06/19 4:15 p.m.•32 views

CVE-2020-4281

5.4CVSS5.6AI score0.00179EPSS

CVE•added 2020/06/19 4:15 p.m.•32 views

CVE-2020-4295

5.4CVSS5.6AI score0.00179EPSS

CVE•added 2019/04/03 2:29 p.m.•31 views

CVE-2018-1731