IBM Engineering Insights 7.0.2

CPE Details

IBM Engineering Insights 7.0.2
ibm
engineering_insights
7.0.2
2021-03-30
15h55 +00:00
2021-06-08
14h21 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:ibm:engineering_insights:7.0.2:*:*:*:*:*:*:*

Informations

Vendor

ibm

Product

engineering_insights

Version

7.0.2

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2021-20519 2021-04-12 18h00 +00:00 IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441.
5.4
Moyen
CVE-2020-4965 2021-04-12 18h00 +00:00 IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.
7.5
Haute
CVE-2020-4964 2021-04-12 18h00 +00:00 IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.
4.3
Moyen
CVE-2020-4920 2021-04-12 18h00 +00:00 IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396.
5.4
Moyen
CVE-2021-20520 2021-03-30 16h45 +00:00 IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198572.
5.4
Moyen
CVE-2021-20518 2021-03-30 16h45 +00:00 IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198437.
5.4
Moyen
CVE-2021-20506 2021-03-30 16h45 +00:00 IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231.
5.4
Moyen
CVE-2021-20504 2021-03-30 16h45 +00:00 IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231.
5.4
Moyen
CVE-2021-20503 2021-03-30 16h45 +00:00 IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198182.
5.4
Moyen
CVE-2021-20502 2021-03-30 16h45 +00:00 IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 198059.
7.1
Haute
CVE-2021-20447 2021-03-30 16h45 +00:00 IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196623.
5.4
Moyen
CVE-2021-20352 2021-03-30 16h45 +00:00 IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194710.
5.4
Moyen