VendorsIBMengineering_lifecycle_optimization_-_engineering_insightsall versions
Vulnerabilities

IBM Engineering Lifecycle Optimization - Engineering Insights

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

18CVEs
CVE-2024-39727
IBM Engineering Lifecycle Optimization - Engineering Insights tabnabbing
Published 2024-12-25 · Analyzed
9.8EPSS 0.003
CVE-2020-4495
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By sending a specially-crafted request to the REST API, an attacker could exploit this vulnerability to bypass access restrictions, and execute arbitrary actions with administrative privileges. IBM X-Force ID: 182114.
Published 2021-06-02 · Modified
9.0EPSS 0.026
CVE-2024-39726
IBM Engineering Insights XML external entity injection
Published 2024-11-15 · Analyzed
8.2EPSS 0.007
CVE-2021-20371
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195516.
Published 2021-06-02 · Modified
6.5EPSS 0.012
CVE-2020-4732
IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictions. IBM X-Force ID: 188126.
Published 2021-06-02 · Modified
6.5EPSS 0.008
CVE-2020-4974
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434.
Published 2021-07-28 · Modified
6.5EPSS 0.006
CVE-2021-20343
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194593.
Published 2021-06-02 · Modified
5.5EPSS 0.005
CVE-2021-20345
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194594.
Published 2021-06-02 · Modified
5.5EPSS 0.005
CVE-2021-20346
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194595.
Published 2021-06-02 · Modified
5.5EPSS 0.005
CVE-2021-20347
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194596.
Published 2021-06-02 · Modified
5.5EPSS 0.005
CVE-2021-20348
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 194597.
Published 2021-06-02 · Modified
5.5EPSS 0.005
CVE-2020-5030
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 193737.
Published 2021-06-02 · Modified
5.4EPSS 0.005
CVE-2021-20338
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194449.
Published 2021-06-02 · Modified
5.4EPSS 0.005
CVE-2020-5004
IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192957.
Published 2021-07-28 · Modified
5.4EPSS 0.005
CVE-2021-29668
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199406.
Published 2021-06-02 · Modified
5.4EPSS 0.005
CVE-2021-29670
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199408.
Published 2021-06-02 · Modified
5.4EPSS 0.005
CVE-2020-4977
IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192470.
Published 2021-06-02 · Modified
5.4EPSS 0.005
CVE-2024-39725
IBM Engineering Lifecycle Optimization - Engineering Insights information disclosure
Published 2024-12-25 · Analyzed
5.3EPSS 0.004