Ibm Rational Engineering Lifecycle Manager vulnerabilities
141 known vulnerabilities affecting ibm/rational_engineering_lifecycle_manager.
Total CVEs
141
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH12MEDIUM124LOW5
Vulnerabilities
Page 3 of 8
CVE-2021-20357P4MEDIUMCVSS 5.4v6.0.2v6.0.6+2 more2021-01-27
CVE-2021-20357 [MEDIUM] CWE-79 CVE-2021-20357: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963.
nvd
CVE-2020-4524P4MEDIUMCVSS 5.4v6.0.2v6.0.6+2 more2021-01-27
CVE-2020-4524 [MEDIUM] CWE-79 CVE-2020-4524: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182434.
nvd
CVE-2020-4865P4MEDIUMCVSS 5.4v6.0.2v6.0.6+2 more2021-01-27
CVE-2020-4865 [MEDIUM] CWE-79 CVE-2020-4865: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190741.
nvd
CVE-2020-4855P4MEDIUMCVSS 5.4v6.0.2v6.0.6+2 more2021-01-27
CVE-2020-4855 [MEDIUM] CWE-79 CVE-2020-4855: IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190457.
nvd
CVE-2019-4083P4MEDIUMCVSS 5.4≥ 6.0, ≤ 6.0.6.12019-06-27
CVE-2019-4083 [MEDIUM] CWE-79 CVE-2019-4083: IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) i
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157383
nvd
CVE-2019-4250P4MEDIUMCVSS 5.4≥ 6.0, ≤ 6.0.6.12019-06-27
CVE-2019-4250 [MEDIUM] CWE-79 CVE-2019-4250: IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) i
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159648
nvd
CVE-2021-20519P4MEDIUMCVSS 5.4v6.0.2v6.0.6+3 more2021-04-12
CVE-2021-20519 [MEDIUM] CWE-79 CVE-2021-20519: IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows user
IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441.
nvd
CVE-2020-4920P4MEDIUMCVSS 5.4v6.0.2v6.0.6+3 more2021-04-12
CVE-2020-4920 [MEDIUM] CWE-79 CVE-2020-4920: IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allo
IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396.
nvd
CVE-2016-2864P4MEDIUMCVSS 5.4v4.0.0v4.0.1+12 more2016-11-24
CVE-2016-2864 [MEDIUM] CWE-79 CVE-2016-2864: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before i
nvd
CVE-2016-0273P4MEDIUMCVSS 5.4v4.0.0v4.0.1+12 more2016-11-24
CVE-2016-0273 [MEDIUM] CWE-79 CVE-2016-0273: Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before i
nvd
CVE-2020-4445P4MEDIUMCVSS 5.4v6.0.2v6.0.6+2 more2020-09-02
CVE-2020-4445 [MEDIUM] CWE-79 CVE-2020-4445: IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability a
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181122.
nvd
CVE-2020-4522P4MEDIUMCVSS 5.4v6.0.2v6.0.6+2 more2020-09-02
CVE-2020-4522 [MEDIUM] CWE-79 CVE-2020-4522: IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability a
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182397.
nvd
CVE-2020-4546P4MEDIUMCVSS 5.4v6.0.2v6.0.6+2 more2020-09-02
CVE-2020-4546 [MEDIUM] CWE-79 CVE-2020-4546: IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability a
IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 183314.
nvd
CVE-2021-20352P4MEDIUMCVSS 5.4v6.0.2v6.0.6+1 more2021-03-30
CVE-2021-20352 [MEDIUM] CWE-79 CVE-2021-20352: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194710.
nvd
CVE-2021-20518P4MEDIUMCVSS 5.4v6.0.2v6.0.6+1 more2021-03-30
CVE-2021-20518 [MEDIUM] CWE-79 CVE-2021-20518: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198437.
nvd
CVE-2021-20447P4MEDIUMCVSS 5.4v6.0.2v6.0.6+1 more2021-03-30
CVE-2021-20447 [MEDIUM] CWE-79 CVE-2021-20447: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196623.
nvd
CVE-2021-20506P4MEDIUMCVSS 5.4v6.0.2v6.0.6+1 more2021-03-30
CVE-2021-20506 [MEDIUM] CWE-79 CVE-2021-20506: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231.
nvd
CVE-2021-20503P4MEDIUMCVSS 5.4v6.0.2v6.0.6+1 more2021-03-30
CVE-2021-20503 [MEDIUM] CWE-79 CVE-2021-20503: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198182.
nvd
CVE-2021-20504P4MEDIUMCVSS 5.4v6.0.2v6.0.6+1 more2021-03-30
CVE-2021-20504 [MEDIUM] CWE-79 CVE-2021-20504: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231.
nvd
CVE-2021-20520P4MEDIUMCVSS 5.4v6.0.2v6.0.6+1 more2021-03-30
CVE-2021-20520 [MEDIUM] CWE-79 CVE-2021-20520: IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198572.
nvd