CVSS: 5.4EPSS: 0%CPEs: 22EXPL: 0CVE-2020-4445
https://notcve.org/view.php?id=CVE-2020-4445
02 Sep 2020 — IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181122. Las aplicaciones basadas en IBM Jazz Team Server son vulnerables a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web,... • https://exchange.xforce.ibmcloud.com/vulnerabilities/181122 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 20EXPL: 0CVE-2019-4748
https://notcve.org/view.php?id=CVE-2019-4748
16 Jul 2020 — IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 173174. IBM Jazz Team Server basadas en Applications es vulnerable a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alter... • https://exchange.xforce.ibmcloud.com/vulnerabilities/173174 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0CVE-2019-4603
https://notcve.org/view.php?id=CVE-2019-4603
08 Apr 2020 — IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them appear as if they were created by another user. IBM X-Force ID: 168295. IBM Quality Manager (RQM) versiones 6.02, 6.06 y 6.0.6.1, podría permitir a un usuario autenticado crear palabras clave por medio de la API REST y hacer que aparezcan como si fueran creadas por otro usuario. ID de IBM X-Force: 168295. • https://exchange.xforce.ibmcloud.com/vulnerabilities/168295 • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 5.4EPSS: 0%CPEs: 3EXPL: 0CVE-2019-4602
https://notcve.org/view.php?id=CVE-2019-4602
08 Apr 2020 — IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 168293. IBM Quality Manager (RQM) versiones 6.02, 6.06 y 6.0.6.1, es vulnerable a ataques de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz d... • https://exchange.xforce.ibmcloud.com/vulnerabilities/168293 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0CVE-2019-4601
https://notcve.org/view.php?id=CVE-2019-4601
08 Apr 2020 — IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to obtain sensitive information from a stack trace that could aid in further attacks against the system. IBM Quality Manager (RQM) versiones 6.02, 6.06 y 6.0.6.1, podría permitir a un usuario autenticado obtener información confidencial de un rastro de pila que podría ayudar en nuevos ataques contra el sistema. • https://exchange.xforce.ibmcloud.com/vulnerabilities/168294 • CWE-209: Generation of Error Message Containing Sensitive Information •
CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0CVE-2019-4252
https://notcve.org/view.php?id=CVE-2019-4252
27 Jun 2019 — IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 159883. IBM Rational Collaborative Lifecycle Management 6.0 a 6.0.6.1 podría permitir a un atacante remoto atravesar directorios en el sistema. Un atacante podría enviar una solicitud de URL especialmente diseñada que contenga ... • http://www.ibm.com/support/docview.wss?uid=ibm10956525 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 5.4EPSS: 0%CPEs: 7EXPL: 0CVE-2019-4250
https://notcve.org/view.php?id=CVE-2019-4250
27 Jun 2019 — IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159648. Los productos de IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 6.0 a 6.0.6.1) son vulnerables a los scripts entre sitios. Esta vulner... • http://www.ibm.com/support/docview.wss?uid=ibm10956525 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 7EXPL: 0CVE-2019-4249
https://notcve.org/view.php?id=CVE-2019-4249
27 Jun 2019 — IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 159647. IBM Rational Collaborative Lifecycle Management 6.0 a 6.0.6.1 es vulnerable a los scripts entre sitios. Esta vulnerabilidad permite a los usuarios incrustar código JavaScript arbitrario e... • http://www.ibm.com/support/docview.wss?uid=ibm10956525 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 7EXPL: 0CVE-2019-4084
https://notcve.org/view.php?id=CVE-2019-4084
27 Jun 2019 — IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) could allow an authenticated user to obtain sensitive information from CLM Applications that could be used in further attacks against the system. IBM X-Force ID: 157384. Los productos de IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 6.0 a 6.0.6.1) podrían permitirle a un usuario identificado obtener información confidencial de las aplicaciones CLM que podrían usarse en futuros ataques co... • http://www.ibm.com/support/docview.wss?uid=ibm10956525 •
CVSS: 5.4EPSS: 0%CPEs: 7EXPL: 0CVE-2019-4083
https://notcve.org/view.php?id=CVE-2019-4083
27 Jun 2019 — IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 157383. Los productos de IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 6.0 a 6.0.6.1) son vulnerables a los cross-site scripting. Esta vulner... • http://www.ibm.com/support/docview.wss?uid=ibm10956525 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •