CVE-2019-19913

Intland codeBeamer ALM 9.5 and earlier is affected by a stored XSS vulnerability in the Trackers Title parameter. The root cause is improper handling/validation of this input, allowing injected scripts to execute in the context of the vulnerable page. Affected software: codeBeamer ALM 9.5 and ear...

CVE-2019-19912

Intland codeBeamer ALM

CVE-2020-26517

CVE-2020-26517 affects Intland codeBeamer ALM, versions 10.x through 10.1.SP4. The issue is a cross-site scripting (XSS) vulnerability that can be exploited via: (1) WebDAV file uploads to a project by authenticated users, (2) the users import functionality by admin users, and (3) modifying the l...