IBM Engineering Requirements Quality Assistant vulnerabilities

5 vulnerabilities

Known vulnerabilities in IBM Engineering Requirements Quality Assistant, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2021-29899ibmengineering requirements quality assistant+1
EPSS score
1.05%
IBM Engineering Requirements Quality Assistant prior to 3.1.3 could allow an authenticated user to cause a denial of service. IBM X-Force ID: 207413.
4.3CVE-2020-4667ibmengineering requirements quality assistant
EPSS score
0.82%
IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation. IBM X-Force ID: 186282.
5.4CVE-2020-4666ibmengineering requirements quality assistant
EPSS score
0.56%
IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186281.
5.4CVE-2020-4663ibmengineering requirements quality assistant
EPSS score
0.56%
IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186234.
5.4CVE-2020-4664ibmengineering requirements quality assistant
EPSS score
0.56%
IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186235.