Show filters
42 Total Results
Displaying 21-30 of 42
Sort by:
Attacker Value
Unknown

CVE-2021-20343

Disclosure Date: June 01, 2021 (last updated February 22, 2025)
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 194593.
Attacker Value
Unknown

CVE-2020-5030

Disclosure Date: June 01, 2021 (last updated February 22, 2025)
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 193737.
Attacker Value
Unknown

CVE-2020-4856

Disclosure Date: February 26, 2021 (last updated February 22, 2025)
IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190459.
Attacker Value
Unknown

CVE-2020-4975

Disclosure Date: February 26, 2021 (last updated February 22, 2025)
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192435.
Attacker Value
Unknown

CVE-2021-20350

Disclosure Date: February 26, 2021 (last updated February 22, 2025)
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194707.
Attacker Value
Unknown

CVE-2020-4866

Disclosure Date: February 26, 2021 (last updated February 22, 2025)
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190742.
Attacker Value
Unknown

CVE-2021-20351

Disclosure Date: February 26, 2021 (last updated February 22, 2025)
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708.
Attacker Value
Unknown

CVE-2020-4863

Disclosure Date: February 26, 2021 (last updated February 22, 2025)
IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190566.
Attacker Value
Unknown

CVE-2020-4857

Disclosure Date: February 26, 2021 (last updated February 22, 2025)
IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190460.
Attacker Value
Unknown

CVE-2021-20340

Disclosure Date: February 26, 2021 (last updated February 22, 2025)
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194451.