Engineering Workflow Management

48 known vulnerabilities.

Engineering Workflow Management at a glance

Last 12 months: 2
Critical · all time: 0
Exploited · all time: 0
Public exploit · all time: 0

New vulnerabilities per month · last 2412 months

Show as table

Month	Vulnerabilities	Critical
Nov 2026	0	0
Oct 2026	0	0
Sep 2026	0	0
Aug 2026	0	0
Jul 2026	0	0
Jun 2026	2	0
May 2026	0	0
Apr 2026	0	0
Mar 2026	0	0
Feb 2026	0	0
Jan 2026	0	0
Dec 2025	0	0
Nov 2025	0	0
Oct 2025	0	0
Sep 2025	0	0
Aug 2025	0	0
Jul 2025	0	0
Jun 2025	0	0
May 2025	0	0
Apr 2025	0	0
Mar 2025	0	0
Feb 2025	0	0
Jan 2025	0	0
Dec 2024	0	0

Most common weaknesses

All Critical High Medium Low Exploited only Public exploit

48 results · Feed

Medium 6.5

CVE-2024-51454

IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities Host Header Injection observed

IBM Engineering Workflow Management 7.0.2 through 7.0.2 Interim Fix 035, 7.0.3 through 7.0.3 Interim Fix 017, and 7.1 through 7.1 Interim Fix 004 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could al…

IBM Engineering Workflow Management

Jun 22, 2026
Medium 5.4

CVE-2025-33128

IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities HTML / XSS Injection observed

IBM Engineering Workflow Management 7.0.3 through 7.0.3 Interim Fix 020, and 7.1 through 7.1 Interim Fix 007 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering …

IBM Engineering Workflow Management

Jun 22, 2026
Medium 4.9

CVE-2024-28793

IBM Engineering Workflow Management cross-site scripting

IBM Engineering Workflow Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. Under certain configurations, this vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potential…

IBM Engineering Workflow Management

May 28, 2024
Medium 4.3

CVE-2020-4989

IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and 6.0.0.1 could allow a…

IBM Rational Team Concert Engineering Workflow Management

Mar 15, 2022
Medium 4.3

CVE-2021-29701

IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could …

IBM Rational Team Concert Engineering Workflow Management

Jan 11, 2022
Medium 5.4

CVE-2021-29844

IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated atta…

IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager

Oct 27, 2021
Medium 6.5

CVE-2021-29786

IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-F…

IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager

Oct 27, 2021
High 7.5

CVE-2021-29774

IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurati…

IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager

Oct 27, 2021
Medium 5.4

CVE-2021-29713

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…

IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager

Oct 27, 2021
Medium 5.4

CVE-2021-29673

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…

IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager

Oct 27, 2021
Medium 5.4

CVE-2020-5004

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jul 28, 2021
Medium 6.3

CVE-2020-4974

IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated atta…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jul 28, 2021
Medium 5.4

CVE-2021-20507

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows user…

IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager

Jul 19, 2021
Medium 5.4

CVE-2020-5031

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows user…

IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager

Jul 19, 2021
Medium 5.4

CVE-2021-20519

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Apr 12, 2021
Medium 5.9

CVE-2020-4965

IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Apr 12, 2021
Medium 6.4

CVE-2020-4920

IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed a…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Apr 12, 2021
Medium 4.3

CVE-2020-4964

IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a …

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Apr 12, 2021
Medium 5.4

CVE-2021-20520

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
Medium 5.4

CVE-2021-20518

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
Medium 5.4

CVE-2021-20506

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
Medium 5.4

CVE-2021-20504

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
Medium 5.4

CVE-2021-20503

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
Medium 5.4

CVE-2021-20447

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
High 7.1

CVE-2021-20502

IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. …

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
Medium 5.4

CVE-2021-20352

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
Medium 5.4

CVE-2021-20351

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 5.4

CVE-2021-20350

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 5.4

CVE-2021-20340

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 5.4

CVE-2020-4975

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 5.4

CVE-2020-4866

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 6.4

CVE-2020-4863

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitr…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 6.4

CVE-2020-4857

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitr…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 6.4

CVE-2020-4856

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitr…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 5.4

CVE-2021-20357

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jan 27, 2021
Medium 5.4

CVE-2020-4865

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jan 27, 2021
Medium 5.4

CVE-2020-4855

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jan 27, 2021
Medium 5.4

CVE-2020-4547

IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jan 27, 2021
Medium 5.4

CVE-2020-4524

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jan 27, 2021
Medium 5.4

CVE-2020-4733

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jan 8, 2021

Engineering Workflow Management

Engineering Workflow Management at a glance

Most common weaknesses

IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities Host Header Injection observed

IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities HTML / XSS Injection observed

IBM Engineering Workflow Management cross-site scripting

IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and 6.0.0.1 could allow a…

IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could …

IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated atta…

IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-F…

IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurati…

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated atta…

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows user…

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows user…

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…

IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt…

IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed a…

IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a …

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. …

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitr…

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitr…

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitr…

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a…

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…