Skip to content

Known vulnerabilities in IBM Rational Team Concert

Is your version affected?

CVE Summary Score Published
CVE-2020-4989 IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and 6.0.0.1 could allow an… 4.3 Medium Mar 15, 2022
CVE-2021-29701 IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could… 4.3 Medium Jan 11, 2022
CVE-2021-29844 IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF) 5.4 Medium Oct 27, 2021
CVE-2021-29786 IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user 6.5 Medium Oct 27, 2021
CVE-2021-29774 IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain… 7.5 High Oct 27, 2021
CVE-2021-29713 IBM Jazz Team Server products are vulnerable to cross-site scripting 5.4 Medium Oct 27, 2021
CVE-2021-29673 IBM Jazz Team Server products are vulnerable to cross-site scripting 5.4 Medium Oct 27, 2021
CVE-2020-5004 IBM Jazz Foundation products are vulnerable to cross-site scripting 5.4 Medium Jul 28, 2021
CVE-2020-4974 IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF) 6.3 Medium Jul 28, 2021
CVE-2021-20507 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting 5.4 Medium Jul 19, 2021
CVE-2020-5031 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting 5.4 Medium Jul 19, 2021
CVE-2021-20519 IBM Jazz Team Server products are vulnerable to cross-site scripting 5.4 Medium Apr 12, 2021
CVE-2020-4965 IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to… 5.9 Medium Apr 12, 2021
CVE-2020-4964 IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a… 4.3 Medium Apr 12, 2021
CVE-2020-4920 IBM Jazz Team Server products are vulnerable to stored cross-site scripting 6.4 Medium Apr 12, 2021
CVE-2021-20520 IBM Jazz Foundation Products are vulnerable to cross-site scripting 5.4 Medium Mar 30, 2021
CVE-2021-20518 IBM Jazz Foundation Products are vulnerable to cross-site scripting 5.4 Medium Mar 30, 2021
CVE-2021-20504 IBM Jazz Foundation Products are vulnerable to cross-site scripting 5.4 Medium Mar 30, 2021
CVE-2021-20506 IBM Jazz Foundation Products are vulnerable to cross-site scripting 5.4 Medium Mar 30, 2021
CVE-2021-20503 IBM Jazz Foundation Products are vulnerable to cross-site scripting 5.4 Medium Mar 30, 2021
CVE-2021-20502 IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data 7.1 High Mar 30, 2021
CVE-2021-20447 IBM Jazz Foundation Products are vulnerable to cross-site scripting 5.4 Medium Mar 30, 2021
CVE-2021-20352 IBM Jazz Foundation Products are vulnerable to cross-site scripting 5.4 Medium Mar 30, 2021
CVE-2021-20351 IBM Engineering products are vulnerable to cross-site scripting 5.4 Medium Mar 4, 2021
CVE-2021-20340 IBM Engineering products are vulnerable to cross-site scripting 5.4 Medium Mar 4, 2021

Other IBM products