Skip to content
Sign in
5.4 Medium

CVE-2021-20543 IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTML injection

Description

IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 198929.

Affected products and versions

Product Affected versions Fixed in
Jazz Team Server 7.0 7.0 → 7.0.2 No fix stated
Jazz Team Server 6.0 6.0.6 → 6.0.6.1 No fix stated

Other CVEs of Jazz Team Server

The 10 CVEs of Jazz Team Server →
CVE-2021-38879 IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive… 3.7 Low CVE-2021-38871 IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting 5.4 Medium CVE-2021-29865 IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to hijack the clicking action… 5.4 Medium CVE-2021-20551 IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 allows web pages to be stored locally which can be read by… 4.0 Medium
Track this CVE