Engineering Workflow Management

48 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

46 results · Clear filters · Feed

Medium 6.5

CVE-2024-51454

IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities Host Header Injection observed

IBM Engineering Workflow Management 7.0.2 through 7.0.2 Interim Fix 035, 7.0.3 through 7.0.3 Interim Fix 017, and 7.1 through 7.1 Interim Fix 004 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could al…

IBM Engineering Workflow Management

Jun 22, 2026
Medium 5.4

CVE-2025-33128

IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities HTML / XSS Injection observed

IBM Engineering Workflow Management 7.0.3 through 7.0.3 Interim Fix 020, and 7.1 through 7.1 Interim Fix 007 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering …

IBM Engineering Workflow Management

Jun 22, 2026
Medium 4.9

CVE-2024-28793

IBM Engineering Workflow Management cross-site scripting

IBM Engineering Workflow Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. Under certain configurations, this vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potential…

IBM Engineering Workflow Management

May 28, 2024
Medium 4.3

CVE-2020-4989

IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and 6.0.0.1 could allow a…

IBM Rational Team Concert Engineering Workflow Management

Mar 15, 2022
Medium 4.3

CVE-2021-29701

IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could …

IBM Rational Team Concert Engineering Workflow Management

Jan 11, 2022
Medium 5.4

CVE-2021-29844

IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated atta…

IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager

Oct 27, 2021
Medium 6.5

CVE-2021-29786

IBM Jazz Team Server products stores user credentials in clear text which can be read by an authenticated user. IBM X-F…

IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager

Oct 27, 2021
Medium 5.4

CVE-2021-29713

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…

IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager

Oct 27, 2021
Medium 5.4

CVE-2021-29673

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…

IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager

Oct 27, 2021
Medium 5.4

CVE-2020-5004

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jul 28, 2021
Medium 6.3

CVE-2020-4974

IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated atta…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jul 28, 2021
Medium 5.4

CVE-2021-20507

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows user…

IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager

Jul 19, 2021
Medium 5.4

CVE-2020-5031

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows user…

IBM Rational Collaborative Lifecycle Management Rational DOORS Next Generation Rational Engineering Lifecycle Manager

Jul 19, 2021
Medium 5.4

CVE-2021-20519

IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Apr 12, 2021
Medium 5.9

CVE-2020-4965

IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Apr 12, 2021
Medium 6.4

CVE-2020-4920

IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed a…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Apr 12, 2021
Medium 4.3

CVE-2020-4964

IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a …

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Apr 12, 2021
Medium 5.4

CVE-2021-20520

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
Medium 5.4

CVE-2021-20518

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
Medium 5.4

CVE-2021-20506

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
Medium 5.4

CVE-2021-20504

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
Medium 5.4

CVE-2021-20503

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
Medium 5.4

CVE-2021-20447

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
Medium 5.4

CVE-2021-20352

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Mar 30, 2021
Medium 5.4

CVE-2021-20351

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 5.4

CVE-2021-20350

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 5.4

CVE-2021-20340

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 5.4

CVE-2020-4975

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 5.4

CVE-2020-4866

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 6.4

CVE-2020-4863

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitr…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 6.4

CVE-2020-4857

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitr…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 6.4

CVE-2020-4856

IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitr…

IBM Rational Quality Manager Rational DOORS Next Generation Rational Team Concert

Mar 4, 2021
Medium 5.4

CVE-2021-20357

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jan 27, 2021
Medium 5.4

CVE-2020-4865

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jan 27, 2021
Medium 5.4

CVE-2020-4855

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jan 27, 2021
Medium 5.4

CVE-2020-4547

IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jan 27, 2021
Medium 5.4

CVE-2020-4524

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jan 27, 2021
Medium 5.4

CVE-2020-4733

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jan 8, 2021
Medium 5.4

CVE-2020-4697

IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jan 8, 2021
Medium 4.3

CVE-2020-4544

IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical er…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Jan 8, 2021