IBM Doors Next vulnerabilities, page 2
27 vulnerabilities
Known vulnerabilities in IBM Doors Next, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-4733ibmcollaborative_lifecycle_management+15
EPSS score0.56%
IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188127.CVE-2020-4281ibmdoors_next+1EPSS score0.56%
IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176141.CVE-2020-4691ibmcollaborative_lifecycle_management+15EPSS score0.56%
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186698.CVE-2024-41787ibmdoors_next+1EPSS score1.10%
IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code.CVE-2024-27253ibmdoors_nextEPSS score0.57%
IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities.CVE-2019-4748ibmcollaborative_lifecycle_management+10EPSS score0.56%
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 173174.CVE-2023-45192ibmdoors_next+1EPSS score0.68%
IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 268758.