Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2021-20519

Disclosure Date: April 09, 2021 (last updated February 22, 2025)
IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441.
Attacker Value
Unknown

CVE-2020-4964

Disclosure Date: April 09, 2021 (last updated November 28, 2024)
IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.
Attacker Value
Unknown

CVE-2020-4920

Disclosure Date: April 09, 2021 (last updated February 22, 2025)
IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396.
Attacker Value
Unknown

CVE-2020-4965

Disclosure Date: April 09, 2021 (last updated February 22, 2025)
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.