Skip to content

Known vulnerabilities in IBM Rational Engineering Lifecycle Manager

Is your version affected?

CVE Summary Score Published
CVE-2020-4920 IBM Jazz Team Server products are vulnerable to stored cross-site scripting 6.4 Medium Apr 12, 2021
CVE-2021-20520 IBM Jazz Foundation Products are vulnerable to cross-site scripting 5.4 Medium Mar 30, 2021
CVE-2021-20518 IBM Jazz Foundation Products are vulnerable to cross-site scripting 5.4 Medium Mar 30, 2021
CVE-2021-20504 IBM Jazz Foundation Products are vulnerable to cross-site scripting 5.4 Medium Mar 30, 2021
CVE-2021-20506 IBM Jazz Foundation Products are vulnerable to cross-site scripting 5.4 Medium Mar 30, 2021
CVE-2021-20503 IBM Jazz Foundation Products are vulnerable to cross-site scripting 5.4 Medium Mar 30, 2021
CVE-2021-20502 IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data 7.1 High Mar 30, 2021
CVE-2021-20447 IBM Jazz Foundation Products are vulnerable to cross-site scripting 5.4 Medium Mar 30, 2021
CVE-2021-20352 IBM Jazz Foundation Products are vulnerable to cross-site scripting 5.4 Medium Mar 30, 2021
CVE-2021-20357 IBM Jazz Foundation products is vulnerable to cross-site scripting 5.4 Medium Jan 27, 2021
CVE-2020-4865 IBM Jazz Foundation products is vulnerable to cross-site scripting 5.4 Medium Jan 27, 2021
CVE-2020-4855 IBM Jazz Foundation products is vulnerable to cross-site scripting 5.4 Medium Jan 27, 2021
CVE-2020-4547 IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim 5.4 Medium Jan 27, 2021
CVE-2020-4524 IBM Jazz Foundation products is vulnerable to cross-site scripting 5.4 Medium Jan 27, 2021
CVE-2020-4733 IBM Jazz Foundation products are vulnerable to cross-site scripting 5.4 Medium Jan 8, 2021
CVE-2020-4697 IBM Jazz Foundation products are vulnerable to cross-site scripting 5.4 Medium Jan 8, 2021
CVE-2020-4691 IBM Jazz Foundation Products are vulnerable to cross-site scripting 4.6 Medium Jan 8, 2021
CVE-2020-4544 IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical… 4.3 Medium Jan 8, 2021
CVE-2020-4487 IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical… 4.3 Medium Jan 8, 2021
CVE-2018-1608 IBM Rational Engineering Lifecycle Manager 6.0 through 6.0.6 uses weaker than expected cryptographic algorithms that… 5.9 Medium May 1, 2019
CVE-2018-1929 IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 could allow a malicious user to be allowed to view any view… 4.3 Medium Mar 14, 2019
CVE-2018-1914 IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting 5.4 Medium Mar 14, 2019
CVE-2018-1910 IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting 5.4 Medium Mar 14, 2019
CVE-2018-1694 IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM… 5.9 Medium Nov 6, 2018
CVE-2018-1606 IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM… 4.3 Medium Nov 6, 2018

Other IBM products