IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192957.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NIBM Engineering Lifecycle Optimization Engineering Insights
APPIbm7.07.0.17.0.2IBM Engineering Requirements Quality Assistant On Premises
APPIbmwszystkie wersjeIBM Engineering Test Management
APPIbm7.0.07.0.17.0.2IBM Engineering Workflow Management
APPIbm7.07.0.17.0.2IBM Rational Collaborative Lifecycle Management
APPIbm6.0.26.0.66.0.6.1IBM Rational Doors Next Generation
APPIbm6.0.66.0.6.17.07.0.17.0.2IBM Rational Engineering Lifecycle Manager
APPIbm6.0.26.0.66.0.6.1IBM Rational Quality Manager
APPIbm6.0.66.0.6.1IBM Rational Team Concert
APPIbm6.0.66.0.6.1
Related vulnerabilities
IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 is vulnerable to an XML External...
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authentic...
IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain co...
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions...
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker t...