Ibm Doors Next vulnerabilities

27 known vulnerabilities affecting ibm/doors_next.

Total CVEs

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL1HIGH3MEDIUM23

Vulnerabilities

SortPage 1 of 2

CVE-2024-27253P3CRITICALCVSS 10.0≥ 7.0.3, ≤ 7.0.3 Interim Fix 0182026-08-12

CVE-2024-27253 [CRITICAL] CWE-287 CVE-2024-27253: IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass secur IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities.

nvd

CVE-2024-41787P3HIGHCVSS 8.1v7.0.2v7.0.32025-01-10

CVE-2024-41787 [HIGH] CWE-367 CVE-2024-41787: IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code.

nvd

CVE-2023-45192P3HIGHCVSS 8.2v7.0.2v7.0.32024-06-06

CVE-2023-45192 [HIGH] CWE-611 CVE-2023-45192: IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 is vulnerable to an XML External IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 268758.

nvd

CVE-2020-4965P3HIGHCVSS 7.5v7.0.0v7.0.1+1 more2021-04-12

CVE-2020-4965 [HIGH] CWE-327 CVE-2020-4965: IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.

nvd

CVE-2020-4857P4MEDIUMCVSS 5.4v7.0v7.0.1+1 more2021-03-04

CVE-2020-4857 [MEDIUM] CWE-79 CVE-2020-4857: IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows us IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190460.

nvd

CVE-2021-20519P4MEDIUMCVSS 5.4v7.0.0v7.0.1+1 more2021-04-12

CVE-2021-20519 [MEDIUM] CWE-79 CVE-2021-20519: IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows user IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441.

nvd

CVE-2020-4920P4MEDIUMCVSS 5.4v7.0.0v7.0.1+1 more2021-04-12

CVE-2020-4920 [MEDIUM] CWE-79 CVE-2020-4920: IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allo IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396.

nvd

CVE-2020-4856P4MEDIUMCVSS 5.4v7.0v7.0.1+1 more2021-03-04

CVE-2020-4856 [MEDIUM] CWE-79 CVE-2020-4856: IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows us IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190459.

nvd

CVE-2020-4863P4MEDIUMCVSS 5.4v7.0v7.0.1+1 more2021-03-04

CVE-2020-4863 [MEDIUM] CWE-79 CVE-2020-4863: IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows us IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190566.

nvd

CVE-2020-4445P4MEDIUMCVSS 5.4v7.02020-09-02

CVE-2020-4445 [MEDIUM] CWE-79 CVE-2020-4445: IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability a IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181122.

nvd

CVE-2020-4522P4MEDIUMCVSS 5.4v7.02020-09-02

CVE-2020-4522 [MEDIUM] CWE-79 CVE-2020-4522: IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability a IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182397.

nvd

CVE-2020-4546P4MEDIUMCVSS 5.4v7.02020-09-02

CVE-2020-4546 [MEDIUM] CWE-79 CVE-2020-4546: IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability a IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183314.

nvd

CVE-2019-4748P4MEDIUMCVSS 5.4v7.02020-07-16

CVE-2019-4748 [MEDIUM] CWE-79 CVE-2019-4748: IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability a IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 173174.

nvd

CVE-2021-20350P4MEDIUMCVSS 5.4v7.0v7.0.1+1 more2021-03-04

CVE-2021-20350 [MEDIUM] CWE-79 CVE-2021-20350: IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194707.

nvd

CVE-2021-20351P4MEDIUMCVSS 5.4v7.0v7.0.1+1 more2021-03-04

CVE-2021-20351 [MEDIUM] CWE-79 CVE-2021-20351: IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708.

nvd

CVE-2021-20340P4MEDIUMCVSS 5.4v7.0v7.0.1+1 more2021-03-04

CVE-2021-20340 [MEDIUM] CWE-79 CVE-2021-20340: IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194451.

nvd

CVE-2020-4975P4MEDIUMCVSS 5.4v7.0v7.0.1+1 more2021-03-04

CVE-2020-4975 [MEDIUM] CWE-79 CVE-2020-4975: IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192435.

nvd

CVE-2020-4866P4MEDIUMCVSS 5.4v7.0v7.0.1+1 more2021-03-04

CVE-2020-4866 [MEDIUM] CWE-79 CVE-2020-4866: IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190742.

nvd

CVE-2020-4733P4MEDIUMCVSS 5.4v7.0v7.0.12021-01-08

CVE-2020-4733 [MEDIUM] CWE-79 CVE-2020-4733: IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188127.

nvd

CVE-2020-4697P4MEDIUMCVSS 5.4v7.0v7.0.12021-01-08

CVE-2020-4697 [MEDIUM] CWE-79 CVE-2020-4697: IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186790.

nvd

1 / 2Next →