Engineering Insights IBM Engineering Insights

Do you want an email whenever new security vulnerabilities are reported in IBM Engineering Insights?

By the Year

In 2024 there have been 0 vulnerabilities in IBM Engineering Insights . Engineering Insights did not have any published security vulnerabilities last year.

Year Vulnerabilities Average Score
2024 0 0.00
2023 0 0.00
2022 0 0.00
2021 13 5.61
2020 0 0.00
2019 0 0.00
2018 0 0.00

It may take a day or so for new Engineering Insights vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.

Recent IBM Engineering Insights Security Vulnerabilities

IBM Jazz Team Server products are vulnerable to stored cross-site scripting

CVE-2020-4920 5.4 - Medium - April 12, 2021

IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191396.

XSS

IBM Jazz Team Server products contain an undisclosed vulnerability

CVE-2020-4964 4.3 - Medium - April 12, 2021

IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on the application which could be used to phish other users. IBM X-Force ID: 192419.

IBM Jazz Team Server products use weaker than expected cryptographic algorithms

CVE-2020-4965 7.5 - High - April 12, 2021

IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192422.

Use of a Broken or Risky Cryptographic Algorithm

IBM Jazz Team Server products are vulnerable to cross-site scripting

CVE-2021-20519 5.4 - Medium - April 12, 2021

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441.

XSS

IBM Jazz Foundation Products are vulnerable to cross-site scripting

CVE-2021-20352 5.4 - Medium - March 30, 2021

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194710.

XSS

IBM Jazz Foundation Products are vulnerable to cross-site scripting

CVE-2021-20447 5.4 - Medium - March 30, 2021

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196623.

XSS

IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data

CVE-2021-20502 7.1 - High - March 30, 2021

IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 198059.

XXE

IBM Jazz Foundation Products are vulnerable to cross-site scripting

CVE-2021-20503 5.4 - Medium - March 30, 2021

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198182.

XSS

IBM Jazz Foundation Products are vulnerable to cross-site scripting

CVE-2021-20504 5.4 - Medium - March 30, 2021

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231.

XSS

IBM Jazz Foundation Products are vulnerable to cross-site scripting

CVE-2021-20506 5.4 - Medium - March 30, 2021

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231.

XSS

IBM Jazz Foundation Products are vulnerable to cross-site scripting

CVE-2021-20518 5.4 - Medium - March 30, 2021

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198437.

XSS

IBM Jazz Foundation Products are vulnerable to cross-site scripting

CVE-2021-20520 5.4 - Medium - March 30, 2021

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198572.

XSS

IBM Jazz Foundation products is vulnerable to cross-site scripting

CVE-2021-20357 5.4 - Medium - January 27, 2021

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963.

XSS

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for IBM Rhapsody Design Manager or by IBM? Click the Watch button to subscribe.

IBM
Vendor

subscribe