IBM Engineering Insights
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in IBM Engineering Insights.
By the Year
In 2026 there have been 0 vulnerabilities in IBM Engineering Insights. Engineering Insights did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 13 | 5.73 |
It may take a day or so for new Engineering Insights vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent IBM Engineering Insights Security Vulnerabilities
IBM Jazz Team Server products are vulnerable to stored cross-site scripting
CVE-2020-4920
5.4 - Medium
- April 12, 2021
IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396.
XSS
IBM Jazz Team Server products contain an undisclosed vulnerability
CVE-2020-4964
4.3 - Medium
- April 12, 2021
IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.
IBM Jazz Team Server products use weaker than expected cryptographic algorithms
CVE-2020-4965
7.5 - High
- April 12, 2021
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.
Use of a Broken or Risky Cryptographic Algorithm
IBM Jazz Team Server products are vulnerable to cross-site scripting
CVE-2021-20519
- April 12, 2021
IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441.
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2021-20352
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194710.
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2021-20447
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196623.
IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
CVE-2021-20502
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 198059.
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2021-20503
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198182.
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2021-20504
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231.
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2021-20506
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231.
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2021-20518
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198437.
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2021-20520
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198572.
IBM Jazz Foundation products is vulnerable to cross-site scripting
CVE-2021-20357
- January 27, 2021
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for IBM Engineering Insights or by IBM? Click the Watch button to subscribe.
