JF
Product
Jazz Foundation
by IBM · last CVE Feb 2, 2026
12
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 11Low 0
Watch

Add Jazz Foundation to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-36157
9.1
1%
Aug 24
IBM Engineering Lifecycle Management incorrect authorization
Affected: 7.0.2 through 7.0.2 iFix035; 7.0.3 through 7.0.3 iFix018; 7.1.0 through 7.1.0 iFix004
CVE-2025-25048
6.5
0%
Sep 4
IBM Jazz Foundation path traversal
Affected: 7.0.2 through 7.0.2 iFix033; 7.0.3 through 7.0.3 iFix012; 7.1.0 through 7.1.0 iFix002
CVE-2019-4457
6.5
1%
Feb 19
IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obtain sensitive information that could be used in further…
Affected: 6.0.0 through 6.0.6.1
CVE-2024-43184
6.1
0%
Sep 4
IBM Jazz Foundation cross-site scripting
Affected: 7.0.2 through 7.0.2 iFix033; 7.0.3 through 7.0.3 iFix012; 7.1.0 through 7.1.0 iFix002
CVE-2023-45181
6.1
0%
Nov 25
IBM Jazz Foundation cross-site scripting
Affected: 7.0.2
CVE-2025-15395
5.4
0%
Feb 2
IBM Jazz Foundation access control violation
Affected: 7.0.3 through 7.0.3 iFix019; 7.1.0 through 7.1.0 iFix005
CVE-2025-1826
5.4
0%
Oct 7
IBM Jazz Foundation cross-site scripting
Affected: 7.0.2 through 7.0.2 iFix034; 7.0.3 through 7.0.3 iFix016; 7.1.0 through 7.1.0 iFix004
CVE-2021-29669
5.4
0%
Jan 12
IBM Jazz Foundation cross-site scripting
Affected: 6.0.6, 6.0.6.1, 7.0, 7.0.1, 7.0.2
CVE-2021-39059
5.4
0%
May 11
IBM Jazz Foundation (IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) is vulnerable to cross-site scripting
Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2
CVE-2023-26280
5.3
0%
Nov 25
IBM Jazz Foundation improper access control
Affected: 7.0.2, 7.0.3
CVE-2024-41780
4.6
0%
Jan 3
IBM Jazz Foundation information disclosure
Affected: 7.0.2, 7.0.3, 7.1.0
CVE-2024-5591
4.3
0%
Jan 3
IBM Jazz Foundation information disclosure
Affected: 7.0.2, 7.0.3, 7.1.0
Showing 12