16 results (0.008 seconds)

CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-41773 – IBM Global Configuration Management incorrect ownership assignment

https://notcve.org/view.php?id=CVE-2024-41773

20 Aug 2024 — IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due to improper access controls. • https://exchange.xforce.ibmcloud.com/vulnerabilities/350347 • CWE-708: Incorrect Ownership Assignment •

CVSS: 5.4EPSS: 0%CPEs: 23EXPL: 0

CVE-2021-20351

https://notcve.org/view.php?id=CVE-2021-20351

04 Mar 2021 — IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708. Los productos de IBM Engineering son vulnerables a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la func... • https://exchange.xforce.ibmcloud.com/vulnerabilities/194708 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 23EXPL: 0

CVE-2021-20350

https://notcve.org/view.php?id=CVE-2021-20350

04 Mar 2021 — IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194707. Los productos de IBM Engineering son vulnerables a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la func... • https://exchange.xforce.ibmcloud.com/vulnerabilities/194707 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 23EXPL: 0

CVE-2021-20340

https://notcve.org/view.php?id=CVE-2021-20340

04 Mar 2021 — IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194451. Los productos de IBM Engineering son vulnerables a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la func... • https://exchange.xforce.ibmcloud.com/vulnerabilities/194451 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 23EXPL: 0

CVE-2020-4975

https://notcve.org/view.php?id=CVE-2020-4975

04 Mar 2021 — IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192435. Los productos de IBM Engineering son vulnerables a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la func... • https://exchange.xforce.ibmcloud.com/vulnerabilities/192435 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 23EXPL: 0

CVE-2020-4866

https://notcve.org/view.php?id=CVE-2020-4866

04 Mar 2021 — IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190742. Los productos de IBM Engineering son vulnerables a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la func... • https://exchange.xforce.ibmcloud.com/vulnerabilities/190742 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.4EPSS: 0%CPEs: 23EXPL: 0

CVE-2020-4863

https://notcve.org/view.php?id=CVE-2020-4863

04 Mar 2021 — IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190566. Los productos de IBM Engineering son vulnerables a un ataque de tipo cross-site scripting almacenados. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, al... • https://exchange.xforce.ibmcloud.com/vulnerabilities/190566 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.4EPSS: 0%CPEs: 23EXPL: 0

CVE-2020-4857

https://notcve.org/view.php?id=CVE-2020-4857

04 Mar 2021 — IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190460. Los productos de IBM Engineering son vulnerables a un ataque de tipo cross-site scripting almacenados. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, al... • https://exchange.xforce.ibmcloud.com/vulnerabilities/190460 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.4EPSS: 0%CPEs: 23EXPL: 0

CVE-2020-4856

https://notcve.org/view.php?id=CVE-2020-4856

04 Mar 2021 — IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190459. Los productos de IBM Engineering son vulnerables a un ataque de tipo cross-site scripting almacenados. Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, al... • https://exchange.xforce.ibmcloud.com/vulnerabilities/190459 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 30EXPL: 0

CVE-2021-20357

https://notcve.org/view.php?id=CVE-2021-20357

27 Jan 2021 — IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963. Los productos de IBM Jazz Foundation, son vulnerables a ataques de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la fu... • https://exchange.xforce.ibmcloud.com/vulnerabilities/194963 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •