JT
Product
Jazz Team Server
9
CVEs
0
On KEV
5.4
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 8Low 1
Watch
Add Jazz Team Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-38871 | 5.4 | Jun 24 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2 |
| CVE-2021-29865 | 5.4 | Jun 24 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to hijack the clicking action of the victim Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2 |
| CVE-2021-20543 | 5.4 | Jun 24 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTML injection Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2 |
| CVE-2021-39043 | 5.4 | May 20 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to stored cross-site scripting Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2 |
| CVE-2021-38879 | 5.3 | Jun 24 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2 |
| CVE-2021-20355 | 5.3 | Jun 24 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2 |
| CVE-2021-20544 | 4.3 | Jun 24 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2 |
| CVE-2021-20421 | 4.3 | Jun 24 | IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF) Affected: 6.0.6; 6.0.6.1; 7.0; 7.0.1; 7.0.2 |
Showing 8