Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
IBM

IBM Engineering Lifecycle Optimization vulnerabilities

52 published CVEs name IBM Engineering Lifecycle Optimization among the affected products.

Published CVEs
52
Last 12 months
0
Critical
0
Known exploited
0

Critical 0High 3Medium 49Low 0Not scored 0

Newest CVEs

  • CVE-2021-29844

    IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from…

    IBM · Engineering Workflow Management

    Medium5.4
  • CVE-2021-29786

    IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Force ID: 203172.

    IBM · Engineering Lifecycle Optimization

    Medium6.5
  • CVE-2021-29774

    IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations. IBM X-Force ID: 203025.

    IBM · Rational Collaborative Lifecycle Management

    High7.5
  • CVE-2021-29713

    IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…

    IBM · Rational Collaborative Lifecycle Management

    Medium5.4
  • CVE-2021-29673

    IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…

    IBM · Rational Team Concert

    Medium5.4
  • CVE-2020-5004

    IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…

    IBM · Rational Team Concert

    Medium5.4
  • CVE-2020-4974

    IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from…

    IBM · Engineering Test Management

    Medium6.3
  • CVE-2021-20507

    IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…

    IBM · Engineering Workflow Management

    Medium5.4
  • CVE-2020-5031

    IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…

    IBM · Engineering Workflow Management

    Medium5.4
  • CVE-2021-29670

    IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…

    IBM · Engineering Test Management

    Medium5.4