IBM DOORS Next 7.0.2

CPE Details

IBM DOORS Next 7.0.2
ibm
doors_next
7.0.2
2021-03-05
12h56 +00:00
2021-06-03
14h33 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:ibm:doors_next:7.0.2:*:*:*:*:*:*:*

Informations

Vendor

ibm

Product

doors_next

Version

7.0.2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-45192 2024-06-06 18h49 +00:00 IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 268758.
8.2
High
CVE-2021-20519 2021-04-12 18h00 +00:00 IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441.
5.4
Medium
CVE-2020-4965 2021-04-12 18h00 +00:00 IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.
7.5
High
CVE-2020-4964 2021-04-12 18h00 +00:00 IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.
4.3
Medium
CVE-2020-4920 2021-04-12 18h00 +00:00 IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396.
5.4
Medium
CVE-2021-20351 2021-03-04 19h05 +00:00 IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708.
5.4
Medium
CVE-2021-20350 2021-03-04 19h05 +00:00 IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194707.
5.4
Medium
CVE-2021-20340 2021-03-04 19h05 +00:00 IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194451.
5.4
Medium
CVE-2020-4975 2021-03-04 19h05 +00:00 IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192435.
5.4
Medium
CVE-2020-4866 2021-03-04 19h05 +00:00 IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190742.
5.4
Medium
CVE-2020-4863 2021-03-04 19h05 +00:00 IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190566.
5.4
Medium
CVE-2020-4857 2021-03-04 19h05 +00:00 IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190460.
5.4
Medium
CVE-2020-4856 2021-03-04 19h05 +00:00 IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190459.
5.4
Medium