CveMateVulnerability intelligence

IBM Rational Collaborative Lifecycle Management vulnerabilities, page 2

171 vulnerabilities

Known vulnerabilities in IBM Rational Collaborative Lifecycle Management, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2018-1827ibmrational_collaborative_lifecycle_management+77y ago27-06-2019 13:45

IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150430.CVE-2018-1423ibmrational_collaborative_lifecycle_management+68y ago10-07-2018 16:00

IBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system. IBM X-Force ID: 139026.CVE-2018-1983ibmrational_collaborative_lifecycle_management+17y ago14-03-2019 23:00

IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 154136.CVE-2018-1826ibmrational_collaborative_lifecycle_management+77y ago27-06-2019 13:45

IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150429.CVE-2021-20347ibmcollaborative_lifecycle_management+115y ago02-06-2021 20:40

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194596.CVE-2021-20371ibmcollaborative_lifecycle_management+115y ago02-06-2021 20:40

IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195516.CVE-2021-20519ibmcollaborative_lifecycle_management+155y ago12-04-2021 18:00

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441.CVE-2021-20348ibmcollaborative_lifecycle_management+115y ago02-06-2021 20:40

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 194597.CVE-2021-20345ibmcollaborative_lifecycle_management+115y ago02-06-2021 20:40

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194594.CVE-2021-20343ibmcollaborative_lifecycle_management+115y ago02-06-2021 20:40

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194593.CVE-2021-20357ibmcollaborative_lifecycle_management+155y ago27-01-2021 16:15

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963.CVE-2021-20338ibmcollaborative_lifecycle_management+115y ago02-06-2021 20:40

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194449.CVE-2021-20507ibmengineering_lifecycle_optimization+65y ago19-07-2021 16:00

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198235.CVE-2021-20346ibmcollaborative_lifecycle_management+115y ago02-06-2021 20:40

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194595.CVE-2021-29774ibmengineering_lifecycle_optimization+54y ago27-10-2021 16:00

IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations. IBM X-Force ID: 203025.CVE-2021-29673ibmengineering_lifecycle_optimization+54y ago27-10-2021 16:00

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199482.CVE-2021-29844ibmengineering_lifecycle_optimization+74y ago27-10-2021 16:00

IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.CVE-2021-29668ibmcollaborative_lifecycle_management+115y ago02-06-2021 20:40

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199406.CVE-2021-29713ibmengineering_lifecycle_optimization+54y ago27-10-2021 16:00

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2021-29670ibmcollaborative_lifecycle_management+115y ago02-06-2021 20:40

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199408.