Ibm Engineering Test Management vulnerabilities

CVE-2021-38934 [MEDIUM] CWE-79 CVE-2021-38934: IBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vu IBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 210671.

CVE-2020-4410 [MEDIUM] CVE-2020-4410: IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a special IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to send a specially crafted HTTP GET request to read attachments on the server that they should not have access to. IBM X-Force ID: 179539.

CVE-2020-4964 [MEDIUM] CVE-2020-4964: IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.

CVE-2020-4487 [MEDIUM] CWE-209 CVE-2020-4487: IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a de IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181862.

CVE-2020-4544 [MEDIUM] CWE-209 CVE-2020-4544: IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a de IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 183189.