IBM Engineering Workflow Management vulnerabilities

CVEs per yearBy the year they were published

1. 20204
2. 202139
3. 20222
4. 20241
5. 20262

Newest CVEs

• CVE-2024-51454

  IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities Host Header Injection observed

  IBM · Engineering Workflow Management

  Medium6.5
• CVE-2025-33128

  IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities HTML / XSS Injection observed

  IBM · Engineering Workflow Management

  Medium5.4
• CVE-2024-28793

  IBM Engineering Workflow Management cross-site scripting

  IBM · Engineering Workflow Management

  Medium4.9
• CVE-2020-4989

  IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and 6.0.0.1 could allow an authenticated user to obtain sensitive…

  IBM · Engineering Workflow Management

  Medium4.3
• CVE-2021-29701

  IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticated attacker to…

  IBM · Engineering Workflow Management

  Medium4.3
• CVE-2021-29844

  IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from…

  IBM · Engineering Workflow Management

  Medium5.4
• CVE-2021-29786

  IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-Force ID: 203172.

  IBM · Engineering Lifecycle Optimization

  Medium6.5
• CVE-2021-29774

  IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations. IBM X-Force ID: 203025.

  IBM · Rational Collaborative Lifecycle Management

  High7.5
• CVE-2021-29713

  IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…

  IBM · Rational Collaborative Lifecycle Management

  Medium5.4
• CVE-2021-29673

  IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…

  IBM · Rational Team Concert

  Medium5.4