Engineering Requirements Quality Assistant On-Premises vulnerabilities

Product

Engineering Requirements Quality Assistant On-Premises

by IBM · last CVE Jul 18, 2022

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities29 In the news0 Timeline

Severity mix

Critical 0High 2Medium 27Low 0

Severity

All severities29 Critical0 High2 Medium27 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Engineering Requirements Quality Assistant On-Premises to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-38868	6.5	0%	Jul 18	IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and… Affected: All versions, or not specified
CVE-2021-29799	6.5	1%	Jul 18	IBM Engineering Requirements Quality Assistant On-Premises (All versions) could allow an authenticated user to obtain sensitive information due to improper client side validation Affected: All versions, or not specified
CVE-2021-29899	6.5	1%	Mar 18	IBM Engineering Requirements Quality Assistant prior to 3.1.3 could allow an authenticated user to cause a denial of service Affected: before 3.1.3
CVE-2020-4974	6.3	1%	Jul 28	IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF) Affected: All versions, or not specified
CVE-2021-29790	5.4	0%	Jul 18	IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2021-29788	5.4	0%	Jul 18	IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2020-5004	5.4	0%	Jul 28	IBM Jazz Foundation products are vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2021-20507	5.4	0%	Jul 19	IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2021-20520	5.4	1%	Mar 30	IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2021-20518	5.4	1%	Mar 30	IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2021-20506	5.4	1%	Mar 30	IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2021-20504	5.4	1%	Mar 30	IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2021-20503	5.4	1%	Mar 30	IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2021-20447	5.4	1%	Mar 30	IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2021-20352	5.4	1%	Mar 30	IBM Jazz Foundation Products are vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2021-20351	5.4	1%	Mar 4	IBM Engineering products are vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2021-20350	5.4	1%	Mar 4	IBM Engineering products are vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2021-20340	5.4	1%	Mar 4	IBM Engineering products are vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2020-4975	5.4	1%	Mar 4	IBM Engineering products are vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2020-4866	5.4	1%	Mar 4	IBM Engineering products are vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2020-4863	5.4	1%	Mar 4	IBM Engineering products are vulnerable to stored cross-site scripting Affected: All versions, or not specified
CVE-2020-4857	5.4	1%	Mar 4	IBM Engineering products are vulnerable to stored cross-site scripting Affected: All versions, or not specified
CVE-2020-4856	5.4	1%	Mar 4	IBM Engineering products are vulnerable to stored cross-site scripting Affected: All versions, or not specified
CVE-2020-4666	5.4	1%	Jan 8	IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2020-4664	5.4	1%	Jan 8	IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2020-4663	5.4	1%	Jan 8	IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting Affected: All versions, or not specified
CVE-2020-4667	4.3	1%	Jan 8	IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation Affected: All versions, or not specified