Jazz Foundation (Ibm) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 86 known versions, newest CVE from 2026-02-02. Vendor: Ibm.
CVEs of Jazz Foundation
- CVE-2025-15395 - CVSS 5.4 (medium), 2026-02-02: IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or…
- CVE-2025-1826 - CVSS 5.4 (medium), 2025-10-07: IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) is…
- CVE-2025-25048 - CVSS 6.5 (medium), 2025-09-04: IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload…
- CVE-2024-43184 - CVSS 6.1 (medium), 2025-09-04: IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 is vulnerable to cross-site scripting. This…
- CVE-2025-36157 - CVSS 9.8 (critical), 2025-08-24: IBM Jazz Foundation 7.0.2 to 7.0.2 iFix035, 7.0.3 to 7.0.3 iFix018, and 7.1.0 to 7.1.0 iFix004 could allow an unauthenticated remote attacker to update server…
- CVE-2021-29669 - CVSS 5.4 (medium), 2025-01-12: IBM Jazz Foundation 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…
- CVE-2024-5591 - CVSS 4.3 (medium), 2025-01-03: IBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned…
- CVE-2024-41780 - CVSS 4.6 (medium), 2025-01-03: IBM Jazz Foundation 7.0.2, 7.0.3, and 7.1.0 could could allow a physical user to obtain sensitive information due to not masking passwords during entry.
- CVE-2023-45181 - CVSS 6.1 (medium), 2024-11-25: IBM Jazz Foundation 7.0.2 and below are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…
- CVE-2023-26280 - CVSS 5.3 (medium), 2024-11-25: IBM Jazz Foundation 7.0.2 and 7.0.3 could allow a user to change their dashboard using a specially crafted HTTP request due to improper access control.
- CVE-2021-39059 - CVSS 5.4 (medium), 2022-05-11: IBM Jazz Foundation (IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) is vulnerable to cross-site scripting. This vulnerability allows users to…
- CVE-2019-4457 - CVSS 6.5 (medium), 2020-02-19: IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obtain sensitive information that could be…
