IBM Engineering Insights
By the Year
In 2024 there have been 0 vulnerabilities in IBM Engineering Insights . Engineering Insights did not have any published security vulnerabilities last year.
Year | Vulnerabilities | Average Score |
---|---|---|
2024 | 0 | 0.00 |
2023 | 0 | 0.00 |
2022 | 0 | 0.00 |
2021 | 13 | 5.61 |
2020 | 0 | 0.00 |
2019 | 0 | 0.00 |
2018 | 0 | 0.00 |
It may take a day or so for new Engineering Insights vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent IBM Engineering Insights Security Vulnerabilities
IBM Jazz Team Server products are vulnerable to stored cross-site scripting
CVE-2020-4920
5.4 - Medium
- April 12, 2021
IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396.
XSS
IBM Jazz Team Server products contain an undisclosed vulnerability
CVE-2020-4964
4.3 - Medium
- April 12, 2021
IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.
IBM Jazz Team Server products use weaker than expected cryptographic algorithms
CVE-2020-4965
7.5 - High
- April 12, 2021
IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.
Use of a Broken or Risky Cryptographic Algorithm
IBM Jazz Team Server products are vulnerable to cross-site scripting
CVE-2021-20519
5.4 - Medium
- April 12, 2021
IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441.
XSS
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2021-20352
5.4 - Medium
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194710.
XSS
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2021-20447
5.4 - Medium
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196623.
XSS
IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
CVE-2021-20502
7.1 - High
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 198059.
XXE
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2021-20503
5.4 - Medium
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198182.
XSS
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2021-20504
5.4 - Medium
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231.
XSS
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2021-20506
5.4 - Medium
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231.
XSS
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2021-20518
5.4 - Medium
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198437.
XSS
IBM Jazz Foundation Products are vulnerable to cross-site scripting
CVE-2021-20520
5.4 - Medium
- March 30, 2021
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198572.
XSS
IBM Jazz Foundation products is vulnerable to cross-site scripting
CVE-2021-20357
5.4 - Medium
- January 27, 2021
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for IBM Rhapsody Design Manager or by IBM? Click the Watch button to subscribe.