Vulnerabilities > IBM > Engineering Workflow Management > 7.0

DATE CVE VULNERABILITY TITLE RISK
2022-01-11 CVE-2021-29701 Unspecified vulnerability in IBM products
IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticated attacker to obtain sensitive information from build definitions that could aid in further attacks against the system.
network
low complexity
ibm
4.3
2021-10-27 CVE-2021-29774 Unspecified vulnerability in IBM products
IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations.
network
ibm
6.0
2021-10-27 CVE-2021-29786 Cleartext Storage of Sensitive Information vulnerability in IBM products
IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user.
network
low complexity
ibm CWE-312
4.0
2021-10-27 CVE-2021-29844 Server-Side Request Forgery (SSRF) vulnerability in IBM products
IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF).
network
low complexity
ibm CWE-918
6.5
2021-07-28 CVE-2020-4974 Server-Side Request Forgery (SSRF) vulnerability in IBM products
IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF).
network
low complexity
ibm CWE-918
6.5
2021-07-28 CVE-2020-5004 Cross-site Scripting vulnerability in IBM products
IBM Jazz Foundation products are vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2021-03-04 CVE-2021-20351 Cross-site Scripting vulnerability in IBM products
IBM Engineering products are vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2021-03-04 CVE-2021-20350 Cross-site Scripting vulnerability in IBM products
IBM Engineering products are vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2021-03-04 CVE-2021-20340 Cross-site Scripting vulnerability in IBM products
IBM Engineering products are vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2021-03-04 CVE-2020-4975 Cross-site Scripting vulnerability in IBM products
IBM Engineering products are vulnerable to cross-site scripting.
network
ibm CWE-79
3.5