Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2761▲ 86 respecto a la semana anterior
Críticas / altas1460▲ 350 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)91▼ 420 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.4) | 0.55% | — | IBM Collaborative Lifecycle ManagementIBM Doors NextIBM Engineering InsightsIBM Engineering Lifecycle Management+9 | 8/1/2021 | 17/6/2026 | IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188127. | |
| Modificada | Media (5.4) | 0.55% | — | IBM Collaborative Lifecycle ManagementIBM Doors NextIBM Engineering InsightsIBM Engineering Lifecycle Management+9 | 8/1/2021 | 17/6/2026 | IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186790. | |
| Modificada | Media (5.4) | 0.55% | — | IBM Collaborative Lifecycle ManagementIBM Doors NextIBM Engineering InsightsIBM Engineering Lifecycle Management+9 | 8/1/2021 | 17/6/2026 | IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186698. | |
| Modificada | Media (4.3) | 0.98% | — | IBM Collaborative Lifecycle ManagementIBM Doors NextIBM Engineering InsightsIBM Engineering Lifecycle Management+9 | 8/1/2021 | 17/6/2026 | IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 183189. | |
| Modificada | Media (4.3) | 0.98% | — | IBM Collaborative Lifecycle ManagementIBM Doors NextIBM Engineering InsightsIBM Engineering Lifecycle Management+9 | 8/1/2021 | 17/6/2026 | IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 181862. | |
| Modificada | Media (5.4) | 0.56% | — | IBM Collaborative Lifecycle ManagementIBM Doors NextIBM Engineering Lifecycle ManagerIBM Engineering Test Management+6 | 16/7/2020 | 17/6/2026 | IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 173174. | |
| Modificada | Media (5.4) | 0.62% | — | IBM Infosphere Master Data Management Reference Data Management | 15/2/2016 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in Reference Data Management (RDM) in IBM InfoSphere Master Data Management 10.1, 11.0 before FP5, 11.3, 11.4, and 11.5 before FP1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. | |
| Modificada | Baja (3.5) | 0.76% | — | IBM Infosphere Master Data Management Reference Data Management HUB | 16/3/2014 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Reference Data Management (RDM) Hub 10.1 and 11.0 before 11.0.0.0-MDM-IF008 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. |