Ibm Rational Doors Next Generation vulnerabilities, page 2

164 vulnerabilities

Known vulnerabilities in Ibm Rational Doors Next Generation, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4MediumCVE-2018-1558ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142956.EPSS0.66%5.4MediumCVE-2018-1892ibm · rational_collaborative_lifecycle_management +7 moreibm rational_collaborative_lifecycle_managementIBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152156.EPSS0.59%4.8MediumCVE-2018-1731ibm · doors_next_generation +1 moreibm doors_next_generationIBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 147710.EPSS0.92%5.4MediumCVE-2018-1827ibm · rational_collaborative_lifecycle_management +7 moreibm rational_collaborative_lifecycle_managementIBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150430.EPSS0.59%6.5MediumCVE-2018-1423ibm · rational_collaborative_lifecycle_management +6 moreibm rational_collaborative_lifecycle_managementIBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks against the system. IBM X-Force ID: 139026.EPSS1.08%5.4MediumCVE-2018-1913ibm · doors_next_generation +1 moreibm doors_next_generationIBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 152737.EPSS0.97%5.4MediumCVE-2018-1826ibm · rational_collaborative_lifecycle_management +7 moreibm rational_collaborative_lifecycle_managementIBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 150429.EPSS0.59%5.5MediumCVE-2021-20347ibm · collaborative_lifecycle_management +11 moreibm collaborative_lifecycle_managementIBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194596.EPSS0.50%6.5MediumCVE-2021-20371ibm · collaborative_lifecycle_management +11 moreibm collaborative_lifecycle_managementIBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195516.EPSS1.20%5.4MediumCVE-2021-20519ibm · collaborative_lifecycle_management +15 moreibm collaborative_lifecycle_managementIBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441.EPSS0.62%5.4MediumCVE-2021-20340ibm · doors_next +7 moreibm doors_nextIBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194451.EPSS0.60%5.5MediumCVE-2021-20348ibm · collaborative_lifecycle_management +11 moreibm collaborative_lifecycle_managementIBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 194597.EPSS0.50%5.4MediumCVE-2021-20351ibm · doors_next +7 moreibm doors_nextIBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708.EPSS0.60%5.5MediumCVE-2021-20345ibm · collaborative_lifecycle_management +11 moreibm collaborative_lifecycle_managementIBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194594.EPSS0.50%5.5MediumCVE-2021-20343ibm · collaborative_lifecycle_management +11 moreibm collaborative_lifecycle_managementIBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194593.EPSS0.50%5.4MediumCVE-2021-20350ibm · doors_next +7 moreibm doors_nextIBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194707.EPSS0.60%5.4MediumCVE-2021-20357ibm · collaborative_lifecycle_management +15 moreibm collaborative_lifecycle_managementIBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963.EPSS0.67%5.4MediumCVE-2021-20338ibm · collaborative_lifecycle_management +11 moreibm collaborative_lifecycle_managementIBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194449.EPSS0.50%5.4MediumCVE-2021-20507ibm · engineering_lifecycle_optimization +6 moreibm engineering_lifecycle_optimizationIBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198235.EPSS0.50%5.5MediumCVE-2021-20346ibm · collaborative_lifecycle_management +11 moreibm collaborative_lifecycle_managementIBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194595.EPSS0.50%