6.5
Moyenne
CVE-2025-25048 IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could…
Description
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jazz Foundation 7.1 | 7.1.0 → dernières | Pas de correctif indiqué |
| Jazz Foundation 7.0 | 7.0.2 → dernières | Pas de correctif indiqué |
Autres CVE de Jazz Foundation
Les 9 CVE de Jazz Foundation →
CVE-2025-15395
IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control…
4.3
Moyenne
CVE-2025-1826
IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3…
5.4
Moyenne
CVE-2024-43184
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 is…
6.1
Moyenne
CVE-2021-29669
IBM Jazz Foundation 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting
5.4
Moyenne