Skip to content

Known vulnerabilities in IBM Rational Collaborative Lifecycle Management

Is your version affected?

CVE Summary Score Published
CVE-2021-29844 IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF) 5.4 Medium Oct 27, 2021
CVE-2021-29786 IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user 6.5 Medium Oct 27, 2021
CVE-2021-29774 IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain… 7.5 High Oct 27, 2021
CVE-2021-29713 IBM Jazz Team Server products are vulnerable to cross-site scripting 5.4 Medium Oct 27, 2021
CVE-2021-29673 IBM Jazz Team Server products are vulnerable to cross-site scripting 5.4 Medium Oct 27, 2021
CVE-2020-5004 IBM Jazz Foundation products are vulnerable to cross-site scripting 5.4 Medium Jul 28, 2021
CVE-2020-4974 IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF) 6.3 Medium Jul 28, 2021
CVE-2021-20507 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting 5.4 Medium Jul 19, 2021
CVE-2020-5031 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting 5.4 Medium Jul 19, 2021
CVE-2021-29670 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting 5.4 Medium Jun 2, 2021
CVE-2021-29668 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting 5.4 Medium Jun 2, 2021
CVE-2021-20371 IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an… 4.3 Medium Jun 2, 2021
CVE-2021-20348 IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) 5.4 Medium Jun 2, 2021
CVE-2021-20347 IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) 5.4 Medium Jun 2, 2021
CVE-2021-20346 IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) 5.4 Medium Jun 2, 2021
CVE-2021-20345 IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) 5.4 Medium Jun 2, 2021
CVE-2021-20343 IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF) 5.4 Medium Jun 2, 2021
CVE-2021-20338 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting 5.4 Medium Jun 2, 2021
CVE-2020-5030 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting 5.4 Medium Jun 2, 2021
CVE-2020-4977 IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting 5.4 Medium Jun 2, 2021
CVE-2020-4732 IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due… 4.3 Medium Jun 2, 2021
CVE-2020-4495 IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused… 8.8 High Jun 2, 2021
CVE-2021-20519 IBM Jazz Team Server products are vulnerable to cross-site scripting 5.4 Medium Apr 12, 2021
CVE-2020-4965 IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to… 5.9 Medium Apr 12, 2021
CVE-2020-4964 IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a… 4.3 Medium Apr 12, 2021

Other IBM products